Introduction:-
This is a configuration example for 861W/881W/891W series ISRs. It has 2 vlans, vlan 1 for wired users and vlan 4 for wireless users. Each vlan has its dedicated DHCP pool.
Configuration Steps:-
Before we could access the AP module, we need to configure the router to open a session between the AP module and the router module.
NOTE:-
1. Define the router’s console interface to the wireless device. The interface is used for communication between the router’s console and the wireless device. Always use port 0.
Router(config)# interface wlan-ap0
Router(config-if)#
The following message appears:-
"The wlan-ap 0 interface is used for managing the embedded AP. Please use the service-module wlan-ap 0 session command to console into the embedded AP".
2. Specify the IP address and subnet mask
Router(config-if)#ip unnumbered vlan 4
Router(config-if)#no shut
Router(config-if)#end
Router#
The IP address can be shared with the IP address assigned to the Cisco Integrated Services Router by using the ip unnumbered vlan4 command.
3. Open the connection between the wireless device and the router’s console.
Router#service-module wlan-ap 0 session
Example:-
Router# service-module wlan-ap0 session
Trying 10.0.0.1, 2002 ... Open
ap>
4. Afterwards, to close the session between the wireless device and the router’s console, perform the following steps:
Wireless Device
A. Control-Shift-6 x
Router
B. Disconnect
C. Press Enter twice.
5. Configure AP module for wireless functionality with one SSID. Example given below.
6. Configure router module for the desired vlans. Example given below.
ROUTER MODULE
Version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 800-12
!
boot-start-marker
boot system flash
boot-end-marker
!
no logging on
!
no aaa new-model
!
ip source-route
ip dhcp excluded-address 10.10.10.1 <<<exclude IP addresses that need not be leased out
ip dhcp excluded-address 10.0.0.1 <<<exclude IP addresses that need not be leased out
!
ip dhcp pool Wireless <<<<DHCP pool for wireless users
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1 <<<<default gateway will be the wireless vlan IP ( vlan 4 )address
!
ip dhcp pool TEST <<<DHCP pool for other wired users
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1 <<default gateway for wired users is the wired vlan IP (vlan 1 )
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
ip inspect log drop-pkt
!
!
username cisco secret 5 $1$D.C.$gY/Pz9EJKgnfGYISyU4NR0
!
!
archive
log config
hidekeys
!
bridge irb
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface wlan-ap0 <<<<<<<<<<<<<Service module interface to manage the embedded AP
description Service module interface to manage the embedded AP
ip unnumbered Vlan4 <<<This interface will use vlan 4 IP to manage the embedded AP
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport trunk native vlan 4 <<<Specifying the native vlan as 4
switchport mode trunk
!
interface Vlan1 <<<<VLAN 1 for wired users
ip address 10.10.10.1 255.255.255.0
!
interface Vlan4 <<<<VLAN4 network for wireless users
ip address 10.0.0.1 255.255.255.0
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.76.75.65
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
banner exec ^C
AP MODULE:-
hostname ap
!
enable secret 5 $1$uoRD$Mz7Q8NVh9L0PYSoIKxghH/
!
no aaa new-model
!
dot11 ssid TEST <<<TEST SSID
vlan 4 <<<TEST SSID mapped to vlan 4
authentication open
authentication key-management wpa
guest-mode <<<<To broadcast the SSID
wpa-psk ascii 0 cisco123 <<<Preshared key is used
!
username cisco privilege 15 secret 5 $1$JbKq$341Z9uDAkeHKcMTO6/WI00
!
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 4 mode ciphers tkip <<<<<Specifying TKIP cipher for the SSID
!
ssid TEST
!
station-role root
!
interface Dot11Radio0.4 <<<<<<<Create sub interface for vlan 4 and specify it as native vlan
encapsulation dot1Q 4 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
!
interface GigabitEthernet0.4 <<<<<<<Create sub interface for vlan 4 and specify it as native vlan
encapsulation dot1Q 4 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address dhcp
no ip route-cache
!
ip default-gateway 10.0.0.1 <<<<IP address of vlan 4 is the default gateway
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 protocol ieee
bridge 1 route ip
!
Related Document:-
Basic Wireless Configuration for 861W/881W/891W
