5GHz SSID Cisco aircap 3702I issue

[berto1886]

Hi to every ones who will read me, I've a speed problem with the 5GHz interface of a Cisco aricap 3702I, if I connect to it with an Android smartphone the connection speed is set to 433Mbps then, if I connect to the same SSID with a notebook (dual band 802.11ac) after an initial notice from windows of a non crypted network connection it connect at 54Mbps! The same notebook connected to a Netgear AP it connect up to 868Mbps! I post the configuration below, tell me if and where is the problem please. Thank'you

no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
!
hostname AP
!
!
logging buffered 10000
logging rate-limit console 9
no logging console
enable secret
!
no aaa new-model
clock timezone ITALY 1 0
clock summer-time ITALY recurring last Sun Mar 2:00 last Sun Oct 2:00
led display off
no ip source-route
ip routing
ip cef
no ip domain lookup
ip domain name domain.it
!
!
!
!
dot11 mbssid
dot11 pause-time 100
dot11 syslog
dot11 vlan-name dati vlan 10
dot11 vlan-name servizi vlan 50
!
dot11 ssid AP_Dati
vlan 10
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii
!
dot11 ssid AP_Dati_5
vlan 10
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii
!
dot11 ssid AP_Service
vlan 50
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii
!
!
!
power inline negotiation prestandard source
no ipv6 cef
!
!
username Cisco password cisco
!
!
bridge irb
!
!
!
interface Dot11Radio0
description Interfaccia fisica Radio 2.4GHz
no ip address
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
encryption vlan 50 mode ciphers aes-ccm tkip
!
ssid AP_Dati
!
ssid AP_Service
!
antenna gain 0
stbc
channel 2412
station-role root
!
interface Dot11Radio0.10
description Interfaccia Radio AP_Dati
encapsulation dot1Q 10 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.50
description Interfaccia Radio AP_Service
encapsulation dot1Q 50
bridge-group 50
bridge-group 50 subscriber-loop-control
bridge-group 50 spanning-disabled
bridge-group 50 block-unknown-source
no bridge-group 50 source-learning
no bridge-group 50 unicast-flooding
!
interface Dot11Radio1
description Interfaccia fisica Radio 5GHz
no ip address
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
ssid AP_Dati_5
!
antenna gain 0
peakdetect
no dfs band block
stbc
channel width 80
channel 5180
station-role root
!
interface Dot11Radio1.10
description Interfaccia Radio AP_Dati_5
encapsulation dot1Q 10 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
description Interfaccia fisica
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.10
description Interfaccia VLAN 10 Dati
encapsulation dot1Q 10 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.50
description Interfaccia VLAN 50 Servizi
encapsulation dot1Q 50
bridge-group 50
bridge-group 50 spanning-disabled
no bridge-group 50 source-learning
!
interface BVI1
description Interfaccia bridge di gestione
mac-address 00a2.ee2d.907c
ip address 192.168.0.252 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.0.254
ip ssh version 2
!
!
bridge 1 route ip
!
!
!
line con 0
login local
line vty 0 4
login local
transport input ssh
!
sntp server 193.204.114.232
end

[Rasika Nayanajith · Accepted solution]

I would try without TKIP encryption. With TKIP you are limited to 54Mbps max data rate. With AES, you can go for 802.11n/802.11ac higher data rates.

interface Dot11Radio0

encryption vlan 10 mode ciphers aes-ccm tkip

encryption vlan 50 mode ciphers aes-ccm tkip

!

interface Dot11Radio1
encryption vlan 10 mode ciphers aes-ccm tkip

HTH

Rasika

*** Pls rate all useful responses ***

[berto1886]

Great! It works! Thank'you!

[Rasika Nayanajith]

Good to hear that.

Rasika