877w wireless not working

[anishkgthomas]

I've tried all possible way to get the wireless working,what could be wroing here is my config

Building configuration...

Current configuration : 4644 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R877W
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$GCxJ$575V8W80LBFEx4vVgH0t7/
!
no aaa new-model
!
dot11 syslog
dot11 vlan-name WiFi vlan 10
!
dot11 ssid Cisco
   vlan 10
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 0 blackhawk365
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.254
!
ip dhcp pool Home
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 212.77.192.59 212.77.192.60
!
ip dhcp pool WiFi
   network 192.168.10.0 255.255.255.0
   dns-server 212.77.192.59 212.77.192.60
   default-router 192.168.10.1
!
!
ip name-server 212.77.192.59
ip name-server 212.77.192.60
!
!
!
username admin privilege 15 password 0 cisco
!
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
broadcast-key vlan 10 change 30
!
!
ssid Cisco
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.10
description vlan10
encapsulation dot1Q 10
ip nat inside
ip virtual-reassembly
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan10
description WiFi
no ip address
ip nat inside
ip virtual-reassembly
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname *********

ppp chap password 0 *********

ppp pap sent-username ********* password 0 *******

!
interface BVI1
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
!
access-list 10 permit any
!
!
!
control-plane
!
bridge 10 protocol ieee
bridge 10 route ip
banner motd ^C
******************HOME ADSL ROUTER ************

********UNAUTHORISED ACCESS PROHIBITED*************

^C
!
line con 0
login local
no modem enable
line aux 0
password cisco
line vty 0 4
password cisco
login
!
scheduler max-task-time 5000
end

[Sebastian Helmer]

Hi George,

I have no experience with the 877 in that way but maybe you have to delete the nat config from the "interface Dot11Radio0.10" , interface Vlan10 and interface BVI1. Thats what I see and looks strange for me.

If I would configure it I would use/create brige-groupe 10 and configure the IP to that interface to keep it simple for the view and is maybe necessary for the DHCP if that is not working too.

regards,

Sebastian

[lal.antony]

Hi George,

I think I see the issue. You have configured Bridge Group 1 in all of the bridging interfaces and then have Bridge Group 10 when you configure the protocol and route ip statements.

Change the Bridge Group ID from 10 to 1 in the following statements then you should be fine.

bridge 1 protocol ieee
bridge 1 route ip

Hope this helps.

Cheers,

Lal Antony

www.lalantony.com

[anishkgthomas]

Thanks guys !

did not understand what sebastian had written. i've tried what lal suggested but no change.

The Green 'OK' light on the router is lit but the client does not get an ip address.

I've erased the ram and reloaded it. here is the config as of now,

Building configuration...

Current configuration : 2935 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R877W
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$GCxJ$575V8W80LBFEx4vVgH0t7/
!
no aaa new-model
!
!
dot11 syslog
dot11 vlan-name WiFi vlan 10
!
dot11 ssid Cisco
   vlan 10
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 045907070C2A444F1E12564147
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.254
!
ip dhcp pool Home
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 212.77.192.59 212.77.192.60
!
ip dhcp pool WiFi
   network 192.168.10.0 255.255.255.0
   dns-server 212.77.192.59 212.77.192.60
   default-router 192.168.10.1
!
!
ip name-server 212.77.192.59
ip name-server 212.77.192.60
!
!
!
username admin privilege 15 password 7 104D000A0618
!
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
broadcast-key vlan 10 change 30
!
!
ssid Cisco
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.10
description Vlan10
encapsulation dot1Q 10 native
ip nat inside
ip virtual-reassembly
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan10
description WiFi
no ip address
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname s4860348
ppp chap password 7 071E20584F1B4857
ppp pap sent-username s4860348 password 7 06170E354D5C584B
!
interface BVI1
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
!
access-list 10 permit any
!
!
!
control-plane
!
banner motd ^CC
*********HOME ADSL ROUTER ************

********UNAUTHORISED ACCESS PROHIBITED*************

^C
!
line con 0
login local
no modem enable
line aux 0
password 7 13061E010803
line vty 0 4
password 7 13061E010803
login
!
scheduler max-task-time 5000
end

any help ?

[Sebastian Helmer]

Sorry Geroge if i make it not enough clear. If I have to configure the Router I would do it a little bit different and I would delete the NAT settings I see in your config in 0.10 and BVI.

What I think, the problem for DHCP is in the BVI configuration.

Remove the IP from BVI 1 and add this one to interface Vlan10.

Or you do it like I think at all:

interface Dot11Radio0.10
description Vlan10
encapsulation dot1Q 10 native
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding

_______

interface Vlan10

 no ip address

 bridge-group 10 

 bridge-group 10 spanning-disabled

___________

interface BVI10

 ip address 192.168.10.1 255.255.255.0

http://www.cisco.com/en/US/docs/routers/access/800/850/software/configuration/guide/wireless.html

regards,
Sebastian

[anishkgthomas]

Thanks Sebastian.

your post, at first was disoriented. figured it out latter.....

no luck ! oh and one more thing after a reload the router does not automatically connect to internet, i have to manully got to the atm interface and bring up the interface and same with the wireless also.

as a in info, if this helps below is the sh int vlan10

Vlan10 is up, line protocol is down
  Hardware is EtherSVI, address is dc7b.94f2.d1ae (bia dc7b.94f2.d1ae)
  Description: WiFi
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 1 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

attached is the updated config

[cadet alain]

Hi,

Does a windows client  with netstumbler sees your AP as protected?

Regards.

Alain.

[anishkgthomas]

Yes it does Alain,

The wireless is detected by my laptop which is also wired to the same router and works like charm except for the wireless. I connect to the wireless with the passkey and it shows connected and thats it. No Ip address is assigned to wireless interface and not internet.

[cadet alain]

your wireless client is not getting an ip address ?

do a debug dhcp server event on router

Regards.

Alain.

[Sebastian Helmer]

Sorry but I see there no difference in the updated config.

but anyhow, vlan 10 protocol is down. The vlan is not working and I think due to that your client will not get an IP. Because you use vlan 10 in the wireless connection.

The VLAN down as long as it is not in use on any physikal interface (access or trunk). Thats what I know from a switch, router, etc..

I think in the cable enviroment evething is working and why do you use not the same on the wireless? Use here vlan 1 too...

Sorry maybe I had to see that much earlier..

- sebastian

[anishkgthomas]

@alain

Tried the command to debug dhcp redundancy nothing happened.

@Sebastian

Change vlan 10 to vlan 1, nothing happening.

The ok green light on the router is blinking now, normally blinks and becomes steady lit.

is there any interfaces to be brought up or shutdown or is there any conflict ? Is there anything that can be done from the SDM ?

Thanks

[moshebendahan · Accepted solution]

hi try this conf

no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
no aaa new-model
!
no ip http server
no ip http secure-server
!
ip cef
ip name-server X.X.X.X - ISP DNS
ip name-server X.X.X.X - ISP DNS
!
username XXXX
enable secret XXXX
!
hostname test2
!
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server X.X.X.X X.X.X.X
!
!
ip dhcp pool WLAN
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server X.X.X.X X.X.X.X
!
!
interface Dot11Radio0
ip address 10.10.10.1 255.255.255.0
ip nat inside
channel 8
power local cck maximum
power local ofdm maximum
encryption mode ciphers tkip
no shut
!
ssid My_Wireless
  guest-mode
  authentication open
  authentication key-management wpa
  wpa-psk ascii 0 12345678
!
interface Vlan1
description "Connection to LAN"
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
load-interval 30
hold-queue 100 out
!
!
interface Dialer 0
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
ppp pap sent-username test@ISP password 123456
!
interface ATM0
no ip address
pvc X/X
pppoe-client dial-pool-number 1
no shut
!
!
ip route 0.0.0.0 0.0.0.0 dialer0
!
!
access-list 2 permit 10.10.10.0 0.0.0.255
ip nat inside source list 2 interface Dialer0 overload
!
!
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface Dialer0 overload
!
!
!
!
line con 0
logging synchronous
login local
!
line vty 0 4
logging synchronous
login local
!

-------------------------------------------------------------------------

OR

------------------------------------------------------------------------

no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
no aaa new-model
!
no ip http server
no ip http secure-server
!
ip cef
ip name-server XXXX
ip name-server XXXX
!
username XXXX password XXXX
enable secret XXXX
!
hostname test1
!
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server XXXX XXXXX
!
!
!
interface Dot11Radio0
no ip address
bridge-group 1
channel 8
power local cck maximum
power local ofdm maximum
encryption mode ciphers tkip
no shut
!
ssid My_Wireless
  guest-mode
  authentication open
  authentication key-management wpa
  wpa-psk ascii 0 12345678
!
bridge irb
bridge 1 protocol ieee
bridge 1 route ip
!
interface Vlan1
description "Bridge with Wireless"
no ip address
bridge-group 1
!
!
interface BVI1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
load-interval 30
hold-queue 100 out
!
!
interface Dialer 0
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
ppp pap sent-username test@ISP password 123456
!
interface ATM0
no ip address
pvc X/X
pppoe-client dial-pool-number 1
no shut
!
!
ip route 0.0.0.0 0.0.0.0 dialer0
!
!
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface Dialer0 overload
!
!
!
!
!
line con 0
logging synchronous
login local
!
line vty 0 4
logging synchronous
login local
!
!

[anishkgthomas]

Thanks to everyones effort and Moshe, thank you.

Its working and now and here is the config

Building configuration...

Current configuration : 2267 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R877W
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
!
dot11 syslog
!
dot11 ssid Cisco
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 0 blackhawk365
!
ip cef
no ip dhcp use vrf connected
!
ip dhcp pool LAN
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   domain-name HomeLan
   dns-server 212.77.192.59 212.77.192.60
!
ip dhcp pool Wlan
   network 192.168.10.0 255.255.255.0
   default-router 192.168.10.1
   dns-server 212.77.192.59 212.77.192.60
!
!
ip name-server 212.77.192.59
ip name-server 212.77.192.60
!
!
!
username admin privilege 15 password 0 cisco
!
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
encryption mode ciphers tkip
!
ssid Cisco
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2447
station-role root
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap chap callin
ppp chap hostname s4860348
ppp chap password 0 qatar12
ppp pap sent-username s4860348 password 0 qatar12
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
!
access-list 10 permit any
!
!
!
control-plane
!
banner motd ^C
********** HOME ADSL ROUTER **************
****** UNAUTHORISED ACCESS PROHIBITED **** ^C
!
line con 0
login local
no modem enable
line aux 0
password aux
login
line vty 0 4
password telnet
login
!
scheduler max-task-time 5000
end

[anishkgthomas]

well thanks to you guys i got the wireless up and working. one more issue, its the clients take time to get an ip address and the ok light on the routers wireless side is blinking and not steady lit.

how do i get it steady and decrease the time for the clients to receive the ip address, both lan and wifi.