cisco 1130 ag multiple ssid (no dhcp support)

[johan maljaars]

hi there,

i' ve got 2 cisco 1130 AG AP's , i want both of them to broadcast 2 ssid's per AP, i've done so far but my clients cannot get a ip adress from the dhcp server.

please read my config.txt file out of my AP and tell me were i am going wrong

thanks

johan maljaars  / info@upqu.nl

upqu media

[Scott Fella]

I don't think you have your encryption correct. If your using WPA you need to only use TKIP. For WPA 2 you use AES.

Here are some links bot both

http://networking-newbie.blogspot.com/2008/11/configuring-wpa-and-wpa2-on-cisco.html?m=1

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c40b6.shtml

Sent from Cisco Technical Support iPhone App

[johan maljaars]

hi,

thanks for your reply, but even when i changed to other encryption setings i cannot obtain a ip adress to my wireless clients (the dhcp server is on my wired network and acessible of course). are there other configurations possible ??

I've read something like to add:

interface FastEthernet0.10

encapsulation dot1Q 10

no ip route-cache

bridge-group 10

no bridge-group 10 source-learning

bridge-group 10 spanning-disabled

interface FastEthernet0.10

encapsulation dot1Q 10

no ip route-cache

bridge-group 10

no bridge-group 10 source-learning

bridge-group 10 spanning-disabled

[Scott Fella]

Okay so now you hopefully got the ssids set, now take a look at this link for multiple ssids and vlans.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080665ceb.shtml

Sent from Cisco Technical Support iPhone App

[Scott Fella]

Here is a support doc that should help

https://supportforums.cisco.com/docs/DOC-14496

Sent from Cisco Technical Support iPhone App

[kcnajaf]

Hi John,

Sorry to say that your configurations does not looks good to me :-( . Please try to modify the configuration as below (assuming your using only dot11radio 0 if not replicate the dot11radio 0 configuratrion to dot11radio 1 as well).

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

!

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

!

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

!

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

!

Also ensure that switch port to which AP is connecting is configured as below.

interface FastEthernet x/x

switchport trunk encapsulation dot1q

switchport trunk native vlan 10

switchport mode trunk

speed 100

duplex full

Regards

Najaf

Please rate when applicable or helpful !!!

[johan maljaars]

thanks, gonna give it a try !

give a reply soon

[johan maljaars]

i've made the following config.txt, upload to my ap (i can see the two ssid's , but connecting to them gives no ip adress), straight to the switch no problem getting an ip from the dhcp  server !

whats up ?

can anyone give me an working simple multi broadcasting ssid ( two ssid) configuration, maybe editing that one would be fine for me ..

thanks for helping me out

johan

[kcnajaf]

Hi John,

Sorry not sure where did the below configuration came from?

interface FastEthernet0

ip helper-address 192.168.178.1

no ip address

no ip route-cache

duplex auto

speed auto

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

The fast ethernet configuration should be as below.

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

First of all, could you confirm if your BVI interface is picking and DHCP ip address? If yes try pinging the BVI interface and confirm if that goes through? Also where is the DHCP scope configured? Could you share the DHCP scope configuration

Also if all above are working as expected for testing just configure the exsisting SSID with open authetication (with out wep) and try connecting client to and confirm if that goes through?

Regards

Najaf

Please rate when applicable or helpful !!!

[johan maljaars]

... changed interface fastethernet0 to its settings you've seen to some suggestions on internet to add ip helper-address.

but didn't work, BVI interface picks up an ip adress,and i can ping that one / reach also the web interface !

als disble any security gives the same...., no ip for the clients

did you got an working config with an 1130ap two ssid's broadcasting and an dhcp server for giving the adresses to the clients through the ap ?

thanks

johan

[kcnajaf]

Hi John,

The configuration looks fine. As requested a typical configuration id provided below. Erase all exisisting configuration and apply below configuration. Then save the configuration and reload the AP and then try connecting the wireless client.

dot11 ssid BADGASTEN

   vlan 13

   authentication open

   mbssid guest-mode

!

dot11 ssid ROELSE

   vlan 11

   authentication open

   mbssid guest-mode

!

!

bridge irb

!

!

interface Dot11Radio0

no ip address

no ip route-cache

!

encryption vlan 13 key 1 size 40bit 7 6C7F123C7FCA transmit-key

encryption vlan 13 mode wep mandatory

!

encryption mode ciphers aes-ccm tkip

!

encryption vlan 11 key 1 size 40bit 7 C27CF72C3684 transmit-key

encryption vlan 11 mode wep mandatory

!

ssid BADGASTEN

!

ssid ROELSE

!

speed  basic-1.0 basic-11.0 basic-54.0

channel 2412

station-role root

!

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

!

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

!

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

!

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

!

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

!

interface BVI1

ip address dhcp client-id FastEthernet0

no ip route-cache

!

ip default-gateway x.x.x.x

!

bridge 1 route ip

Regards

Najaf

Please rate when applicable or helpful !!!

[johan maljaars]

najaf,

when i try to load exactly the above configuration there will be no ssid's broadcasting !

suggestions ?

thanks

[Stephen Rodriguez]

add the follwoing two commnds

dot11 mbssid

and then under the Radio

mbssid

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[johan maljaars]

steve,

added, now giving it a try.., my dhcp server by the way is a win2008 server like..., nothing special on the same ip range / subnet of course

give a reply soon

[johan maljaars]

when loading the configuration now, two ssid's upcoming .. but still the same, no ip adress for the clients

also now my BVI1 now didn't got an ip adress from the dhcp server

my config now:

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname UPQU1

!

enable secret 5 $1$nDCn$DTMxREXd/QkG5nasXDXSr0

!

no aaa new-model

!

resource policy

!

ip subnet-zero

!

!

dot11 mbssid

dot11 ssid BADGASTEN

   vlan 13

   authentication open

   mbssid guest-mode

!

dot11 ssid ROELSE

   vlan 11

   authentication open

   mbssid guest-mode

!

!

bridge irb

!

!

interface Dot11Radio0

no ip address

no ip route-cache

mbssid

!

encryption vlan 13 key 1 size 40bit 7 6C7F123C7FCA transmit-key

encryption vlan 13 mode wep mandatory

!

encryption mode ciphers aes-ccm tkip

!

encryption vlan 11 key 1 size 40bit 7 C27CF72C3684 transmit-key

encryption vlan 11 mode wep mandatory

!

ssid BADGASTEN

!

ssid ROELSE

!

speed  basic-1.0 basic-11.0 basic-54.0

channel 2412

station-role root

!

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

!

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

!

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

!

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

!

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

!

interface BVI1

ip address dhcp client-id FastEthernet0

no ip route-cache

!

ip default-gateway x.x.x.x

!

bridge 1 route ip