Solved: Cisco 2602i Autonomous Mode

jhonny.eriksson · ‎10-27-2014

Hello,

I am having a simple issue associating to my stand alone Cisco 2702. Debug displays the following output:

*Mar 1 02:07:50.471: 3D75990E r 5      29/34/39/37 63- B000 07F 69E300 D168DC 69E300 F0D0 auth l 17
        algorithm 0
        sequence 1
        status 0
        221 - 0 10 18 2 0 0 0 0 0
*Mar 1 02:07:50.471: 3D759B9B t 11     0 - B000 000 D168DC 69E300 69E300 0000 auth l 6
        algorithm 0
        sequence 2
        status 0
*Mar 1 02:07:50.471: 3D759CC2 r 5      30/35/40/39 45- 0000 07F 69E300 D168DC 69E300 F0E0 assreq l 69
        cap 31 infra privacy shorthdr
        listen interval 15
        ssid Truckcam_internal
        rates B 96
        rsn1 mcst aes ucst aes keymgmt wpa2-psk cap C00
        221 - 0 10 18 2 0 0 0 0 0
        221 - 0 50 F2 2 0 1 0
*Mar 1 02:07:50.475: 3D759F38 t 11     0 - 1000 000 D168DC 69E300 69E300 0000 assrsp l 8
        cap 0
        status 25
        aid C000
        rates

It's a simple one SSID setup with WPA2 PSK. I've tried to connect with both IPhone and Windows 8 PC.

Configuration...

...
dot11 vlan-name SSID vlan 1
!
dot11 ssid SSID
   vlan 1
   band-select
   authentication open
   authentication key-management wpa version 2
   guest-mode
   mbssid guest-mode
   mobility network-id 492
   wpa-psk ascii 12345678
   information-element ssidl
!
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
broadcast-key vlan 1 change 10000 membership-termination
!
ssid Truckcam_internal
!
antenna gain 0
stbc
speed 5.5 basic-11.0
power local 7
channel 2472
fragment-threshold 2340
station-role root access-point
rts threshold 2312
no cdp enable
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!

interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f07f.068d.12ec
ip address 172.20.20.42 255.255.255.0
ipv6 enable
!
ip default-gateway 172.20.20.1

!

Thanks,

Rasika Nayanajith · ‎10-29-2014

Hi

Did you erase the previous config & load the given config ? or modified your existing configs.

If you haven't delete your existing config try that first

AP#erase startup-config

Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]

[OK]

Erase of nvram: complete

AP#reload

System configuration has been modified. Save? [yes/no]: no

Proceed with reload? [confirm]

Once you load the new config, test each band seperately (ie shutdown radio0 & test, then shut radio1 while enable radio0 & test). See whether issue is in both bands ? Also test with different type of client as well.

HTH

Rasika

**** Pls rate all useful responses ****

View solution in original post

Rasika Nayanajith · ‎10-27-2014

Hi

You can try a simple configuration like below. Your configuration has some incompatible configs (eg 5.5 & 11Mbps data rate with WPA2/AES)

1. Take a backup of your existing configuration

2. Erase the startup config & reload the AP to come up with zero config.

3. Then configure it like below & give it a try.

dot11 ssid Truckcam_internal
vlan 1
authentication open
authentication key-management wpa version 2
wpa-psk ascii 12345678
mbssid guest-mode
!
interface Dot11Radio0
encryption vlan 1 mode ciphers aes-ccm
ssid Truckcam_internal
mbssid

no shut
!

interface Dot11Radio1
encryption vlan 1 mode ciphers aes-ccm
ssid Truckcam_internal
mbssid
channel width 40-above
no shut
!

interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
!

interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
!
interface BVI1
ip address 172.20.20.42 255.255.255.0
ip default-gateway 172.20.20.1

HTH

Rasika

**** Pls rate all useful responses ****

jhonny.eriksson · ‎10-28-2014

Hello,

Thanks for your reply! Still the same issue though :(

dot11 vlan-name TruckCam vlan 1
!
dot11 ssid Truckcam_internal
   vlan 1
   band-select
   authentication open
   authentication key-management wpa version 2
   guest-mode
   mbssid guest-mode
   mobility network-id 1
   wpa-psk ascii 7 <HIDDEN>
   information-element ssidl
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid Truckcam_internal
!
stbc
mbssid
speed basic-1.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2472
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid Truckcam_internal
!
no dfs band block
stbc
mbssid
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. m16. m17. m18. m19. m20. m21. m22. m23. a1ss7 a2ss7 a3ss7
channel width 40-above
channel dfs
station-role root
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f07f.068d.12ec
ip address 172.20.20.42 255.255.255.0
ipv6 enable
!

*Mar 1 03:00:09.547: F891F88B r 1      52/47/47/52 39- B000 13A 69E300 6E0868 69E300 52C0 auth l 17
   algorithm 0
   sequence 1
   status 0
   221 - 0 10 18 2 0 0 1 0 0
*Mar 1 03:00:09.547: F891FD04 t 1     0 - B000 2900 6E0868 69E300 69E300 0000 auth l 6
   algorithm 0
   sequence 2
   status 0
*Mar 1 03:00:09.551: F89201B1 r 1      52/47/48/52 48- 0000 13A 69E300 6E0868 69E300 52D0 assreq l 86
   cap 431 infra privacy shorthdr
   listen interval 10
   ssid Truckcam_internal
   rates 82 12 18 24 30 48 60 6C
   pwr cap min 8 max 17
   suppd chans 1 D
   rsn1 mcst aes ucst aes keymgmt wpa2-psk cap C00
   extrates C
   221 - 0 10 18 2 0 0 1 0 0
   221 - 0 50 F2 2 0 1 0
*Mar 1 03:00:09.551: F892062D t 1     0 - 1000 000 6E0868 69E300 69E300 0000 assrsp l 8
   cap 0
   status 25
   aid C000
   rates

Rasika Nayanajith · ‎10-29-2014

Hi

Did you erase the previous config & load the given config ? or modified your existing configs.

If you haven't delete your existing config try that first

AP#erase startup-config

Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]

[OK]

Erase of nvram: complete

AP#reload

System configuration has been modified. Save? [yes/no]: no

Proceed with reload? [confirm]

Once you load the new config, test each band seperately (ie shutdown radio0 & test, then shut radio1 while enable radio0 & test). See whether issue is in both bands ? Also test with different type of client as well.

HTH

Rasika

**** Pls rate all useful responses ****

jhonny.eriksson · ‎10-31-2014

Reconfiguration did it. The problem was that the AP was not on premise so I could reset it whitout having a console plugged in.

Funny thing though is that I reloaded it and applied the exact same configuration on it via the CLI. It seems like something happened in the background when I configured via GUI during the first run.

Anyway, now everything works great. Thank you guys... and Cisco for your help! :)

Rasika Nayanajith · ‎10-31-2014

Hi

Good to see that you got it working. Thanks for using rating as well

Rasika