10-21-2010 04:09 PM - edited 11-18-2020 02:51 AM
Here is a very basic configuration example on an 871 ISR Router with an open ssid on a flat vlan 1 for wired and wireless users served from local dhcp server on ISR.
Thanks
Serge
Router#sh run
Building configuration...
Current configuration : 2018 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.254 255.255.255.0
!
!
!
!
!
!
!
controller DSL 0
line-term cpe
!
!
bridge irb
!
!
!
interface FastEthernet0
description WAN
ip address 10.10.10.2 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface Dot11Radio0
no ip address
!
ssid test
authentication open
guest-mode
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2412
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
no ip address
bridge-group 1
!
interface BVI1
ip address 192.168.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0
!
!
no ip http server
no ip http secure-server
ip nat inside source list 100 interface FastEthernet0 overload
!
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
line aux 0
line vty 0 4
login
!
no scheduler allocate
end
Router#
+++++++++++++
This is what I got and it has been working for me. From my modem to my RV016 to my 871w. Once I figure out the PPPOE the 871w will be my only router running, and figure out the port forwarding, but most important I need to configure PPPOE.
mr-r1#sh star
Using 3825 out of 131072 bytes
!
! Last configuration change at 08:10:30 PCTime Sun Oct 28 2012 by ramosm
! NVRAM config last updated at 08:10:33 PCTime Sun Oct 28 2012 by ramosm
!
version 12.4
no service pad
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
no service password-encryption
!
hostname mr-r1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 64000
logging rate-limit 20
enable secret 5 $1$PDK9$YSz8GsnVsDYevR1hVGMG70
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
aaa session-id common
clock timezone PCTime -8
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
!
crypto pki trustpoint TP-self-signed-3978252741
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3978252741
revocation-check none
rsakeypair TP-self-signed-3978252741
!
!
crypto pki certificate chain TP-self-signed-3978252741
certificate self-signed 01 nvram:IOS-Self-Sig#B.cer
dot11 syslog
!
dot11 ssid ramfam
vlan 55
authentication open
mbssid guest-mode
!
ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 10.25.55.1 10.25.55.49
ip dhcp excluded-address 10.25.55.76 10.25.55.254
ip dhcp excluded-address 10.25.50.1 10.25.50.49
ip dhcp excluded-address 10.25.50.76 10.25.50.254
!
ip dhcp pool Data
import all
network 10.25.50.0 255.255.255.0
dns-server 10.55.55.1 4.2.2.1
domain-name MR-Lab1
default-router 10.25.50.1
lease 25
!
ip dhcp pool Wireless
import all
network 10.25.55.0 255.255.255.0
default-router 10.25.55.1
dns-server 10.55.55.1 4.2.2.2
lease 25
!
!
ip cef
ip domain name MR-Lab1.com
ip name-server 10.55.55.1
!
!
!
!
username ramosm privilege 15 secret 5 $1$J2cq$abQJlRlZgmIlEDPX/jd8A1
!
!
!
archive
log config
hidekeys
!
!
no ip ftp passive
!
bridge irb
!
!
interface FastEthernet0
description AirNet 1100
speed 100
spanning-tree portfast
!
interface FastEthernet1
description Extra cat5
spanning-tree portfast
!
interface FastEthernet2
description Ubuntu PC
spanning-tree portfast
!
interface FastEthernet3
description PS3
speed 100
spanning-tree portfast
!
interface FastEthernet4
description Internet Wan Port
ip address 10.55.55.105 255.255.255.0
ip nat outside
ip virtual-reassembly
speed 100
full-duplex
!
interface Dot11Radio0
no ip address
!
encryption vlan 55 key 1 size 128bit 0 AB2081CA12B126DD2F95ABCF32 transmit-key
encryption vlan 55 mode wep mandatory
!
broadcast-key vlan 55 change 30
!
!
ssid ramfam
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
station-role root
!
interface Dot11Radio0.55
encapsulation dot1Q 55 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
ip address 10.25.50.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan55
no ip address
bridge-group 1
!
interface BVI1
ip address 10.25.55.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.55.55.1
ip http server
ip http authentication local
ip http secure-server
!
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source list 2 interface FastEthernet4 overload
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.25.50.0 0.0.0.255
access-list 2 remark SDM_ACL Category=2
access-list 2 permit 10.25.55.0 0.0.0.255
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
exec-timeout 30 0
password Cisco
logging synchronous
no modem enable
line aux 0
line vty 0 4
exec-timeout 20 0
password Cisco
logging synchronous
!
scheduler max-task-time 5000
end
mr-r1#
Great post, very helpful!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: