Re: sonos connected to SG200-50

trih · ‎10-28-2019

I have one Cisco SG200-50 switch on my network and a AP 1602i. I have now also connected a Sonos One SL to the network.

At first I had no problem setting up the Sonos and connect to it. Now after one day I am unable to connect to the Sonos with the app. I have tried to turn off the Sonos, restart my phone, turn my phone off and on, deleting all app cache on my phone and reinstalling the app. Nothing works. Can It be network related?

Georg Pauwen · ‎10-28-2019

Hello,

I think the Sonos uses multicast, so that has to be set up properly on your WLC.

Make sure your WLC has the settings below: (I found this in a post on the Sonos support site):

- CONTROLLER > GENERAL > AP Multicast Mode = Multicast, group IP is set to 239.1.1.1
- CONTROLLER > MULTICAST > Enable Global Multicast Mode = ON
- CONTROLLER > MULTICAST > Enable IGMP Snooping = ON
- CONTROLLER > mDNS > mDNS Global Snooping = ON

- A single SSID is configured and provides access to the respective VLAN
- mDNS Snooping enabled and default mDNS profile selected under Advanced tab (should not be necessary for Sonos)
- Client isolation is NOT configured.
- WPA2 PSK is used.

trih · ‎10-28-2019

I dont have a WLC I only have a single AP

Georg Pauwen · ‎10-28-2019

Hello,

try and set:

station-role workgroup-bridge multicast mode infrastructure

on your autonomous AP.

Also, on the SG200, check if 239.1.1.1 is one of the group addresses learned by IGMP snooping (page 214 of the attached guide)...

https://www.cisco.com/c/dam/en/us/td/docs/switches/lan/csbss/sf20x_sg20x/administration_guide/Cisco_200Sx_v1_4_AG.pdf

trih · ‎10-28-2019

Cannot find the find to set station-role workgroup-bridge multicast mode infrastructure on my AP

The sg200 dosen't seems to have learned anything.

Georg Pauwen · ‎10-28-2019

Hello,

can you post the config of your AP ?

trih · ‎10-28-2019

Building configuration...

Current configuration : 5479 bytes
!
! Last configuration change at 12:28:53 UTC Wed Aug 28 2019
! NVRAM config last updated at 12:30:51 UTC Wed Aug 28 2019
! NVRAM config last updated at 12:30:51 UTC Wed Aug 28 2019
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname XnameX-AP01
!
!
logging rate-limit console 9
enable secret 5 $1$1.mY$DS.oE/z/nUFIRufahmCe3.
!
no aaa new-model
no ip source-route
no ip cef
ip domain name XnameX
ip name-server 172.18.30.12
ip name-server 172.18.30.13
!
!
!
!
dot11 pause-time 100
dot11 association mac-list 701
dot11 syslog
dot11 vlan-name XnameX-Guest vlan 20
dot11 vlan-name XnameX-LAN vlan 1
!
dot11 ssid XnameX-Guest
   vlan 20
   authentication open
   mbssid guest-mode
!
dot11 ssid XnameX-WiFi
   vlan 1
   authentication open
   authentication key-management wpa version 2
   guest-mode
   mbssid guest-mode
   wpa-psk ascii 7 040D5E242C006E1C503D214E342E285C7973777012677131514556
!
!
dot11 network-map
!
no ipv6 cef
!
!
username Cisco password 7 05280F1C2243
username admin password 7 052A080B244E57080954
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid XnameX-Guest
!
ssid XnameX-WiFi
!
antenna gain 0
stbc
beamform ofdm
mbssid
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel 2472
station-role root
l2-filter bridge-group-acl
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 input-address-list 701
bridge-group 1 output-address-list 701
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.14
no ip route-cache
!
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 spanning-disabled
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid XnameX-Guest
!
ssid XnameX-WiFi
!
antenna gain 0
peakdetect
no dfs band block
stbc
beamform ofdm
mbssid
channel dfs
station-role root
l2-filter bridge-group-acl
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 input-address-list 701
bridge-group 1 output-address-list 701
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 spanning-disabled
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
l2-filter bridge-group-acl
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 spanning-disabled
no bridge-group 20 source-learning
!
interface BVI1
mac-address 188b.9d40.097a
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
ip access-list extended SSH-Access
permit tcp host 172.18.30.50 any eq 22
permit tcp host 172.18.30.3 any eq 22
!
!
access-list 111 permit tcp any any neq telnet
access-list 701 permit 2477.033d.ab1c   0000.0000.0000
access-list 701 permit 001b.77d2.14b5   0000.0000.0000
access-list 701 permit 0811.968e.3c64   0000.0000.0000
access-list 701 permit 7018.8bf7.d221   0000.0000.0000
access-list 701 permit 6067.205d.9854   0000.0000.0000
access-list 701 permit a83e.0e08.4f6a   0000.0000.0000
access-list 701 permit 5848.228e.f4ba   0000.0000.0000
access-list 701 permit 4cd1.a1fc.910b   0000.0000.0000
access-list 701 permit 58d9.c31c.8a5e   0000.0000.0000
access-list 701 permit b070.2d61.7e98   0000.0000.0000
access-list 701 permit d0f8.8ca2.e262   0000.0000.0000
access-list 701 permit 0022.6107.8dc3   0000.0000.0000
access-list 701 permit 38f9.d371.0ad2   0000.0000.0000
access-list 701 permit 48a6.b811.aea0   0000.0000.0000
access-list 701 permit 04f1.280d.d7fe   0000.0000.0000
access-list 701 permit e006.e6ce.9cfd   0000.0000.0000
access-list 701 permit 985f.d34f.4274   0000.0000.0000
access-list 701 permit c033.5e2d.0eb5   0000.0000.0000
access-list 701 permit 3c6a.a734.4d51   0000.0000.0000
access-list 701 deny   0000.0000.0000   ffff.ffff.ffff
bridge 1 route ip
!
!
banner motd ^CCUnauthorized access prohibited!^C
!
line con 0
access-class 111 in
login local
line vty 0 4
access-class SSH-Access in
login local
transport input ssh
line vty 5 15
access-class SSH-Access in
login local
transport input ssh
!
sntp server dc03.XnameX.local
sntp broadcast client
end

Georg Pauwen · ‎10-28-2019

Hello,

you have to disablle p2p blocking. I am not sure what the equivalent setting is on a standalone AP, try:

--> no bridge-group 20 block-unknown-source

trih · ‎10-28-2019

If I try to run the following command

AP01(config)#interface dot11Radio 0.1
AP01(config-subif)#no bridge-group 1 block-unknown-source

I get this error

no bridge-group 1 block-unknown-source <cr> not allowed on Dot11Radio0 interface

Georg Pauwen · ‎10-28-2019

Hello,

it's probably not the right command anyway...the problem is that there is almost no information when it comes to standalone APs, but a whole lot when it comes to APs connected to WLCs...

Have a look at the thread below, maybe there is something in there...I'll keep looking as well...

https://en.community.sonos.com/advanced-setups-229000/cisco-wireless-lan-controller-with-sonos-32559

trih · ‎10-28-2019

Running

AP01(config)#interface dot11radio 0
AP01(config-if)#antenna gain 0
AP01(config-if)#station-role workgroup-bridge multicast mode infrastructure

returns

Disable Multiple BSSID before configuring this station-role

And I have 2 ssid's on my AP, 1 for LAN og 1 for GUESTS

trih · ‎10-28-2019

A little update.

I have connected a little unmanaged HP 1410 switch to my network and then connected the Sonos to it. That gives me the possibility to connect to the speaker with a smartphone. Therefore it is the switch that causes the problem.

trih · ‎10-30-2019

Problem with the switch is resolved.
I followed this article https://support.sonos.com/s/article/2118?language=en_US

But there is apparently stil a problem with my AP. I cannot change from ethernet to wifi.

Georg Pauwen · ‎10-30-2019

Hello,

thanks for the updare, very useful article.

The SG200 has a smartport macro for wirless access points, you might want to try and apply that to the port where the AP is connected to...(page 145 of the attached admin guide).

https://www.cisco.com/c/dam/en/us/td/docs/switches/lan/csbss/sf20x_sg20x/administration_guide/Cisco_200Sx_v1_4_AG.pdf