Hi,
Could someone please tell me what's wrong with my switch configuration. I cannot ping devices from my access point or access its web-browser interface.
IP address for vlan 10 interface on the switch is 10.x.x.2
IP address for BVI1 interface on access point is 10.x.x.5
Native VLAN on both the switch and access point is set to vlan 98
FROM THE ACCESS POINT
I cannot ping the switch 10.x.x.2
I cannot ping a device connected to the access point10.x.x.246
FROM THE SWITCH
I can ping a device connected to the access point 10.x.x.246
I can ping the sub-interface for vlan 10 on the router 10.x.x.1
I cannot ping BVI1 on the access point 10.x.x.5
FROM A WIRELESS DEVICE
I can ping the sub-interface for vlan 10 on the switch 10.x.x.2
I can ping the sub-interface for vlan 10 on the router 10.x.x.1
I cannot ping BVI1 on the access point 10.x.x.5
*********************************************************************
SWITCH sh ip int brief
sw-public#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES NVRAM administratively down down
Vlan10 10.x.x.2 YES NVRAM up up
Vlan98 unassigned YES unset up up
Vlan666 unassigned YES unset down down
GigabitEthernet1/0/1 unassigned YES unset up up
…
GigabitEthernet1/0/52 unassigned YES unset up up
sw-public#
Should the IP address for BVI1 appear next to GigabitEthernet1/0/1?
*********************************************************************
ACCESS POINT sh ip int brief
ap#show ip interface br
Interface IP-Address OK? Method Status Protocol
BVI1 10.10.10.5 YES manual up up
Dot11Radio0 unassigned YES NVRAM up up
Dot11Radio0.10 unassigned YES unset up up
Dot11Radio0.98 unassigned YES unset up up
Dot11Radio1 unassigned YES NVRAM up up
Dot11Radio1.10 unassigned YES unset up up
Dot11Radio1.98 unassigned YES unset up up
GigabitEthernet0 unassigned YES NVRAM up up
GigabitEthernet0.10 unassigned YES unset up up
GigabitEthernet0.98 unassigned YES unset up up
ap#
*********************************************************************
SWITCH CONFIGURATION
switch#show config
Using 14534 out of 524288 bytes
!
! Last configuration change at 17:30:48 UTC Sat Feb 16 2019 by ares
! NVRAM config last updated at 17:30:56 UTC Sat Feb 16 2019 by ares
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname switch
!
boot-start-marker
boot-end-marker
!
enable secret 5 #########
!
username ######### privilege 15 secret 5 #########
no aaa new-model
clock timezone UTC -5 0
clock summer-time UTC recurring
switch 1 provision ws-c3750g-48ps
system mtu routing 1500
ip routing
ip domain-name #######.local
ip dhcp database nvram:dhcp_public.txt
ip dhcp excluded-address 10.x.x.1 10.x.x.10
!
ip dhcp pool public
network 10.x.x.0 255.255.255.0
dns-server 10.x.x.1 IP ADDRESS OF THE VLAN 10 SUB-INTERFACE ON THE ROUTER (10.x.x.1)
default-router 10.x.x.2 IP ADDRESS FOR VLAN 10 INTERFACE ON THIS SWITCH (10.x.x.2)
!
!
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
!
!
interface GigabitEthernet1/0/1 CONNECTS TO AIRONET
description aironet1
switchport trunk encapsulation dot1q
switchport trunk native vlan 98
switchport trunk allowed vlan 10,98,666
switchport mode trunk
!
abbreviated
!
interface GigabitEthernet1/0/52 CONNECTS TO ROUTER
description rt-core G0/1
switchport trunk encapsulation dot1q
switchport trunk native vlan 98
switchport trunk allowed vlan 10,98,666
switchport mode trunk
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description guest_vlan
ip address 10.x.x.2 255.255.255.0
no ip route-cache
!
interface Vlan98
description native_vlan
no ip address
no ip route-cache
!
interface Vlan666
description quarantine_vlan
no ip address
no ip route-cache
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 10.x.x.1 IP ADDRESS OF THE VLAN 10 SUB-INTERFACE ON THE ROUTER (10.x.x.1)
!
!
line con 0
exec-timeout 15 0
logging synchronous
login local
length 0
line vty 0 4
exec-timeout 15 0
logging synchronous
login local
length 0
transport input telnet ssh
line vty 5 15
no login
!
ntp peer 10.x.x.1
end
switch#
*********************************************************************
ACCESS POINT CONFIGURATION
ap#show config
Using 3347 out of 32768 bytes
!
! Last configuration change at 00:51:16 EDT Sat May 29 1993 by ares
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 ###########
!
no aaa new-model
clock timezone EST -5 0
clock summer-time EDT recurring
no ip source-route
no ip cef
ip domain name ###########.local
!
!
!
!
dot11 pause-time 100
dot11 syslog
dot11 vlan-name native_vlan vlan 98
dot11 vlan-name public_vlan vlan 10
!
dot11 ssid public_SSID
vlan 10
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
wpa-psk ascii 7 ###########
!
!
dot11 arp-cache optional
!
no ipv6 cef
!
!
username ########### privilege 15 secret 5 ###########
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
ssid #########
!
antenna gain 0
stbc
station-role root
no dot11 extension aironet
!
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!
interface Dot11Radio0.98
encapsulation dot1Q 98 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
ssid public_SSID
!
antenna gain 0
peakdetect
dfs band 3 block
stbc
mbssid
channel width 80
channel dfs
station-role root
no dot11 extension aironet
!
interface Dot11Radio1.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!
interface Dot11Radio1.98
encapsulation dot1Q 98 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 spanning-disabled
no bridge-group 10 source-learning
!
interface GigabitEthernet0.98
encapsulation dot1Q 98 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address #################
ip address 10.x.x.5 255.255.255.0
no ip route-cache
!
ip default-gateway 10.x.x.2
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
exec-timeout 15 0
logging synchronous
login local
length 0
line vty 0 4
exec-timeout 15 0
logging synchronous
login local
length 0
transport input all
!
end
ap#
