Help setting up wireless on Cisco 891W router

[wilder7bc]

         Hi guys I am needing help setting up a cisco 891W router for wireless at my house.

I can get it setup to my modem with wired connections though I am a bit rusty on the Commands I saved my old config file.

On the wireless side though I am having all kinds of problems and the cisco directions are not working:

http://www.cisco.com/en/US/docs/routers/access/800/860-880-890/software/configuration/guide/wlan_ps380_TSD_Products_Configuration_Guide_Chapter.html       

When I follow these commands it does not seem to work correctly.  It looks to be broading casting something when I check my laptop I see a SSID popped up called the following "Other Network"  However, when you try to connect to it you get an error and it says it cannot connect.  It had full bars.

I am not wanting anything complicated I am just wanting to setup the router to connect to the modem on my WAN side, and then I will connect my server to it which will hand out IPs to the wireless clients that connect to the routers wireless. 

I was just going to use 192.168.1.0  255.255.255.0 for my network.    Any help would be appreciated.

So one more time to give idea of what I am building I will have modem go into the fastethernet port of the router which will supply all my home PC and equiptment with internet via wireless.  I will then run a internal lan connection out of the gigabitethernet connection to my servers and home lab.   I had this all setup before except for the wireless but I had to run rip in order for it to communicate with the linksys router, so I am trying to get away from using the linksys and just use the 891w only instead.

Here is my config from AP after following the directions:

============================================================

ap#show run
ap#show running-config
Building configuration...

Current configuration : 2992 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ap
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
!
!
dot11 syslog
!
dot11 ssid ssid
!
!
!
username brian privilege 15 secret 5 xxxxxxxxxxxxxxxxxx
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid catlin
!
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
antenna gain 0
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecti
ng AP with the host router
no ip address
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
banner exec ^CC
% Password change notice.
-----------------------------------------------------------------------

Default username/password setup on AP is cisco/cisco with privilege level 15.
It is strongly suggested that you create a new username with privilege level
15 using the following command for console security.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to
use. After you change your username/password you can turn off this message
by configuring  "no banner login" and "no banner exec" in privileged mode.

-----------------------------------------------------------------------
^C
banner login ^CC
% Password change notice.
-----------------------------------------------------------------------

Default username/password setup on AP is cisco/cisco with privilege level 15.
It is strongly suggested that you create a new username with privilege level
15 using the following command for console security.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to
use. After you change your username/password you can turn off this message
by configuring  "no banner login" and "no banner exec" in privileged mode.

-----------------------------------------------------------------------
^C
!
line con 0
privilege level 15
login local
no activation-character
line vty 0 4
login local
!
cns dhcp
end

ap#

=================================================================

[wilder7bc]

I found this link....

http://bi0os.blogspot.com/2010/10/configuring-cisco-wireless-using-ios.html

Its for an 871w router and it did not fully work but some of it did...

On the AP portion I used the part listed below.  Some of the things that cisco left out that caused it not to work was

871W(config-if-ssid)#guest-mode

871W(config-if-ssid)#authentication open 871W(config-if-ssid)#guest-mode
871W(config-if-ssid)#authentication open

I guess guest-mode allows the SSID to be seen....  Would have been nice if cisco instructions said that...  I dont really want Authentication Open I am wanting   WPA  with a preshared key like on my linksys so that you can connect and it will prompt you for password.

So from this post you can see I picked up a couple more things but I still am in need of help.  I am trying to do this few steps at a time.  The last thing I will do when I finally get it connected up to internet is learn how to add in security and such.  Anyway please post pointers and small things, feel free to ask me questions and give any help!

Oh here is what I used from that 871 web page I listed above.  I want to change the authentication to wpa-preshared next if possible.

===================

Router>en

Router#config t

Router(config)#hostname 871W

871W(config)#int vlan 1

871W(config-if)#ip address 10.1.11.2 255.255.255.0

871W(config-if)#no shut

871W(config-if)#int dot11radio 0

871W(config-if)#ip address 10.1.12.1 255.255.255.0

871W(config-if)#no shut

871W(config-if)#ssid R3WLAN

871W(config-if-ssid)#guest-mode

871W(config-if-ssid)#authentication open

871W(config-if-ssid)#infrastructure-ssid

871W(config-if-ssid)#line con 0

871W(config-line)#password console

871W(config-line)#login

871W(config-line)#logging sync

871W(config-line)#exec-timeout 0 0

871W(config-line)#exit

871W(config)#line vty 0 ?

< 1-4> Last Line number

871W(config)#line vty 0 4

871W(config-line)#password telnet

871W(config-line)#login Router>en
Router#config t
Router(config)#hostname 871W
871W(config)#int vlan 1
871W(config-if)#ip address 10.1.11.2 255.255.255.0
871W(config-if)#no shut
871W(config-if)#int dot11radio 0
871W(config-if)#ip address 10.1.12.1 255.255.255.0
871W(config-if)#no shut
871W(config-if)#ssid R3WLAN
871W(config-if-ssid)#guest-mode
871W(config-if-ssid)#authentication open
871W(config-if-ssid)#infrastructure-ssid
871W(config-if-ssid)#line con 0
871W(config-line)#password console
871W(config-line)#login
871W(config-line)#logging sync
871W(config-line)#exec-timeout 0 0
871W(config-line)#exit
871W(config)#line vty 0 ?
< 1-4> Last Line number
871W(config)#line vty 0 4
871W(config-line)#password telnet
871W(config-line)#login

===========================================

[wilder7bc]

I am having alot of problems trying to get the authentication setup I keep having the following issues:

===========================

ap#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

ap(config)#

ap(config)#interface dot11radio 0

ap(config-if)#no shutdown

ap(config-if)#encryption vlan 1 mode ciphers tkip

ap(config-if)#ssid catlin

ap(config-if-ssid)#vlan 1

ap(config-if-ssid)#authentication open

ap(config-if-ssid)#authentication key-management wpa

ap(config-if-ssid)#wpa-psk ascii 9999999999

*Jun  6 18:09:49.279: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun  6 18:09:49.299: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

*Jun  6 18:09:49.331: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning freque

ncies for 16 seconds

*Jun  6 18:09:49.339: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun  6 18:09:49.351: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun  6 18:09:49.395: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

ap(config)#int dot

ap(config)#int dot11Radio 0

ap(config-if)#no shut

ap(config-if)#no shutdown

ap(config-if)#

*Jun  6 18:09:26.463: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun  6 18:09:26.463: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

ap(config-if)#ssid catlin

ap(config-if-ssid)#

*Jun  6 18:09:49.491: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning freque

ncies for 8 seconds

ap(config-if-ssid)#

*Jun  6 18:09:57.651: %DOT11-6-FREQ_USED: Interface Dot11Radio0, frequency 2412

selected

*Jun  6 18:09:57.655: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*Jun  6 18:09:58.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to upgues

ap(config-if-ssid)#guest-mode

ap(config-if-ssid)#

*Jun  6 18:10:31.207: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

*Jun  6 18:10:31.219: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

ap(config-if-ssid)#vlan 1

ap(config-if-ssid)#

*Jun  6 18:15:21.815: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun  6 18:15:21.815: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

*Jun  6 18:15:22.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to down

Dot11Radio0 is reset, line protocol is down

  Hardware is 802.11N 2.4GHz Radio,

Dot11Radio1 is administratively down, line protocol is down

  Hardware is 802.11N 5GHz Radio

ap#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ap(config)#
ap(config)#interface dot11radio 0
ap(config-if)#no shutdown
ap(config-if)#encryption vlan 1 mode ciphers tkip
ap(config-if)#ssid catlin
ap(config-if-ssid)#vlan 1
ap(config-if-ssid)#authentication open
ap(config-if-ssid)#authentication key-management wpa
ap(config-if-ssid)#wpa-psk ascii 9999999999
*Jun  6 18:09:49.279: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.
*Jun  6 18:09:49.299: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
eset
*Jun  6 18:09:49.331: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning freque
ncies for 16 seconds
*Jun  6 18:09:49.339: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.
*Jun  6 18:09:49.351: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.
*Jun  6 18:09:49.395: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.

=================================================

AS you can see it keeps saying the No SSID configured.  Dot11Radio0 not started.

I can get it to work if I just use the open authentication or atleast I could earlier.   Not sure whats going on now.  I got this informaton off the following site:

http://networking-newbie.blogspot.com/2008/11/configuring-wpa-and-wpa2-on-cisco.html

When I sent in and just did the following it came right up:

==============================================

ap(config)#int dot11Radio 0

ap(config-if)#no shutdown

*Jun  6 18:09:26.463: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.
*Jun  6 18:09:26.463: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
eset
ap(config-if)#ssid "myssid"
ap(config-if-ssid)#
*Jun  6 18:09:49.491: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning freque
ncies for 8 seconds

*Jun  6 18:09:57.651: %DOT11-6-FREQ_USED: Interface Dot11Radio0, frequency 2412
selected
*Jun  6 18:09:57.655: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun  6 18:09:58.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio
0, changed state to up
ap(config-if-ssid)#guest-mode
ap(config-if-ssid)#
*Jun  6 18:10:31.207: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
eset
*Jun  6 18:10:31.219: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

=============================================================================

Its now displaying my SSID I have not tried to connect but it seems like when I put the authentication stuff shown on there that I get those errors listed above any ideas why?

and as soon as I put in vlan 1 look what happens this is just right after the above:

===============================

ap(config-if-ssid)#vlan 1
ap(config-if-ssid)#
*Jun  6 18:15:21.815: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi
o0 not started.
*Jun  6 18:15:21.815: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
eset
*Jun  6 18:15:22.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio
0, changed state to down

==============================

show interface shows that an issue with the following :

Dot11Radio0 is reset, line protocol is down
  Hardware is 802.11N 2.4GHz Radio,

Dot11Radio1 is administratively down, line protocol is down
  Hardware is 802.11N 5GHz Radio

I have not did anything with the dot11radio 1 so I expect it to be down i dont know how to use both of them yet but I dont understand why the dot11radio 0 is down a line protocol usually mean something is configured incorrectly right?

Kind of loss here.

[wilder7bc]

everytime I put the dot11 ssid under vlan it goes down.....

ap#conf t

Enter configuration commands, one per line. End with CNTL/Z.

ap(config)#dot11 ssid myssid

ap(config-ssid)#vlan 1

ap(config-ssid)#

*Jun 6 19:03:18.871: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun 6 19:03:18.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

*Jun 6 19:03:19.875: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to down

ap(config-ssid)#no vlan 1

ap(config-ssid)#

*Jun 6 19:03:35.607: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*Jun 6 19:03:36.595: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to up

ap#conf t

Enter configuration commands, one per line. End with CNTL/Z.

ap(config)#dot11 ssid myssid

ap(config-ssid)#vlan 1

ap(config-ssid)#

*Jun 6 19:03:18.871: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radi

o0 not started.

*Jun 6 19:03:18.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r

eset

*Jun 6 19:03:19.875: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to down

ap(config-ssid)#no vlan 1

ap(config-ssid)#

*Jun 6 19:03:35.607: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*Jun 6 19:03:36.595: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio

0, changed state to up

[wilder7bc]

well after all that still not working...  CISCO documentation pretty much sucks I am really disapointed in the IOS and and configuration of their routers.  I am going to see what I can find on the 1800 series routers now as their routers are similiar to the 891w IOS, and I have about exhausted my searches on 891 stuff.

[Leo Laohoo]

Go here.

There's a post I made (dated 26 May 2013) which have two files attached.  We may not be doing the same thing, but look at the router configuration so you'll understand what I'm trying to do. 

Hope this helps.

[wilder7bc]

Ok thanks I will go check it out.  I may have found a clue about the vlan1 going down though I dont understand it yet.

I found this link

http://www.dslreports.com/faq/15257

and down the page for 881 I started looking at the parts just about the wlan-ap 0 and the vlan 1 and wlan gigbyte I found this:

!

interface Vlan1

description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$

ip address 10.0.1.129 255.255.255.240

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1452

!

the IP nat inside...... I am not sure why but when I added that to my vlan 1 it made my vlan come up....  This may not even be the same problem as above I have started over and wiped my router so many times this could be unrelated.  I am just hoping it is.

The only good thing about this is I had forgot all my commands like enable and basic stuff and after working on this thing non stop for last 48 hours I have picked up alot I had forgotten, though I never understood wireless that much I was around the CCNA level and actually have a CCENT cert.

Ok let me check out your files as well.  thanks again I will get back here if they help me out!

==============================

Ok I did check out the files and they have alot of information in there.  I am trying to riff though it.   I dont need DHCP, or DNS because I want my server 2008 r2 to run that stuff.

I also would like my wireless network to be on same network as my lan network   so that means from what I am starting to pick up so far that I will maybe need to setup the BVI1...

I do think my IOS and my router is fine, and in fact I think everything on my router is good the problem is me not understanding how to configure everything. alot of the guides give either the AP side or the regular router side and not both together, and a few of the guides may have made mistakes because it wouldnt take a few commands so I would do entire guide and have to leave something out which is not good or trying to modify it to leave out all the extra stuff and maybe missing something else.

let me finish playing around here and see if I need to come back here crying or if I can make some headway.

[wilder7bc]

ah well none of it works..... I follow directions from all these pieces of informaton for the router and nothing works.  I will see if I can buy a service contract to get cisco techs to configure the router for me.  I am really disapointed in the newer cisco equiptment, and I dont think I could honestly recommend it to anyone.   It was fine when working on my CCENT and moving towards the CCNA using the old equiptment following the the guide books all that stuff worked. 

However, once I bought a piece of equiptment and tried to use something in a live enviroment and setting up wireless it was a total mess, and all the cisco documentation and little guides and examples didnt work, and I cannot even setup wireless access on a 1500.00 wireless router.  Its not like there is any other applications or technologies getting in the way that are non cisco...  I mean its just a console cable plugged into their propriertary equiptment with their IOS that is in default stages and it wont even take basic configuration to setup wireless with WPA-PSK.     I never even got to the point of getting a chance to try to look at the other stuff...

A company that had a good marketing strategy and wants to put out top of the line equiptment would have much better guides and full example for the very basic stuff at the atleast.

Not impressed at all ...