ACCESS wi-fi

[srikanth ath]

Hi

i have cisco WAP4410N access point(which are in vlan 10.10.x.x) connected to cat3750g(10.10.11.x) switch. and this connected to firewall. i couldnt access wireless gateway. tracert gettting failed after reaching the cat3750g.

wap.......(vlan).......cat3750 (gi 1/0/24)...10.10.11.X....................firewall

what could be the possible reason can anyone explain it. i have just given the default route for any subnet should handle the traffic port 24

C:\Users\srikanth.athelly>tracert 10.10.30.2                                its reaching 10.10.11.254, but not reaching the wap gateway ()vlan subnet)

Tracing route to 10.10.x.2 over a maximum of 30 hops

  1     5 ms    <1 ms    <1 ms  10.10.11.254

  2     *        *        *     Request timed out.

  3     *        *        *     Request timed out.

  4     *        *        *     Request timed out.

  5     *        *        *     Request timed out.

  6     *        *        *     Request timed out.

  7     *        *        *     Request timed out.

  8     *        *        *     Request timed out.

  9     *        *        *     Request timed out.

10     *        *        *     Request timed out.

11     *        *        *     Request timed out.

12     *        *        *     Request timed out.

13     *        *        *     Request timed out.

14     *        *        *     Request timed out.

15     *        *        *     Request timed out.

16     *        *        *     Request timed out.

thanks & regards

srikanth

[srikanth ath]

hi

can any of u help on this. i couldnt access the gateway of wap.

thanks & regards

srikanth

[nkarpysh]

Hi Srkanth,

As far as I have understood you have L2 port (access/trunk) connected to WAP.

In order to route a trafic coming from firewall (different subnet) into the WAP VLAN you need to have SVI both for subnet 10.10.11.x and 10.10.30.x.

Can you please send the config from 3750 to check the traffic path in more details.

Nik

[srikanth ath]

Hi

thaks for the reply here are the interface and sh ip route output from 3750.. we have to use 10.10.11.254/23 subnet to connect the gateway ip 10.10.10.X as we not left with any any ips in 10.10.10.X series.

interface GigabitEthernet1/0/24

no switchport

ip address 10.10.11.254 255.255.254.0

Switch#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

Gateway of last resort is 10.10.10.X to network 0.0.0.0

     10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C       10.10.10.0/23 is directly connected, GigabitEthernet1/0/24 :::: (10.10.11.254/23 connected to 10.10.10.X)

C       10.10.30.0/24 is directly connected, Vlan101                          (Wifi vlan )

S*   0.0.0.0/0 [1/0] via 10.10.10.X

please find the root cause for the above problem

thanks and regards

srikanth

[nkarpysh]

Please send:

show run vlan101

sh ip arp vlan 101

sh mac-addr vlan 101

Try also to ping from 3750 your WAP from two different source:

ping 10.10.30.2

ping 10.10.30.2 source 10.10.11.254

then check arp/mac again

Nik

[srikanth ath]

HI here is my configuration

i could ping to the int vlan ip gateway of vlan 101. but not the WAP which is in vlan 101, but not the 10.10.30.2

root causes may be ping , telnet disabled , though i have to get the web based config. access of wap right. where i couldnt get this as well..

should i have to do somethin on switch.

sh route has the route as connected for both 10.10.11.254 and 10.10.30.0 ..

thanks & regards

srikanth

[nkarpysh]

Right it seems that AP is not answering for both these pings:

Switch#ping 10.10.30.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.30.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

Switch#ping 10.10.30.2 source 10.10.11.254

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.30.2, timeout is 2 seconds:
Packet sent with a source address of 10.10.11.254

.....

Success rate is 0 percent (0/5)

Possibility as you said that ICMP, telnet, etc is blocked on it. You can configure laptop with ip in the WAP subnet and connect directly to AP. Then try to access it ip address on port 80 through web browser.

This guide may help:

http://www.cisco.com/en/US/docs/wireless/access_point/csbap/wap4410n/administration/guide/WAP4410N_Admin_Guide.pdf

P.S. I also see you have other WAP with ip 10.10.30.3 - can you access that fine?

Nik