Hello, all.
I'm having what seems to be a not uncommon problem configuring (?) a spare Aironet 1242 AP as a repeater, to repeat a wirless network from another Aironet 1242 AP (set as the root station on the SSID/VLAN I'd like to repeat). Usually I see the "%DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: No Response" error upon trying to associate, with occasional instances of "%DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: Authenticating," which could be due to other wireless netowrk traffic in the area (I think). The unit I'd like to associate the repeater with is also serving a portion of our office building, but overlooks an area with an external structure we'd like to connect to a wireless network because we can't run a fiber or copper drop out there.
I'm hoping the problem is that I've just got a mismatched setting I can't see because I've been staring at the problem for too long, and need a fresh pair of eyes to break me out of my rut or mental block or whatever. Configs for the two devices are below.
TIA!
~~~~~~~~~~~~~~~~START Repeater Unit Config~~~~~~~~~~~~~~~~
Part Number : 73-11567-01
PCA Assembly Number : 800-30151-01
PCA Revision Number : A0
Top Assembly Part Number : 800-29585-02
Top Revision Number : A0
Product/Model Number : AIR-AP1242G-A-K9
Press RETURN to get started!
*Mar 1 00:00:05.548: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar 1 00:00:07.151: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar 1 00:00:09.342: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:00:09.417: %SYS-6-CLOCKUPDATE: System clock has been updated from 00:00:09 UTC Fri Mar 1 2002 to 19:00:09 -0500 Thu Feb 28 2002, configured from console by console.
*Mar 1 00:00:09.418: %SYS-6-CLOCKUPDATE: System clock has been updated from 19:00:09 -0500 Thu Feb 28 2002 to 19:00:09 -0500 Thu Feb 28 2002, configured from console by console.
*Mar 1 00:00:09.840: %SYS-5-CONFIG_I: Configured from memory by console
*Mar 1 00:00:09.843: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.4(10b)JA, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 24-Oct-07 15:31 by prod_rel_team
*Mar 1 00:00:09.843: %SNMP-5-COLDSTART: SNMP agent on host [Repeater Unit] is undergoing a cold start
*Mar 1 00:00:09.874: %CDP_PD-4-POWER_OK: Full power - AC_ADAPTOR inline power source
*Mar 1 00:00:09.877: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:00:10.341: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar 1 00:00:10.877: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:00:11.878: %LINK-3-UPDOWN: Interface BVI1, changed state to down
*Mar 1 00:00:20.911: %DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: No Response
#sho running-conf
Building configuration...
Current configuration : 4020 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname [Repeater Unit]
!
enable secret 5 [sanitized key]
enable password 7 [sanitized key]
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
aaa session-id common
clock timezone -0500 -5
clock summer-time -0400 recurring
!
!
!
dot11 ssid [unused management VLAN]
vlan 1
authentication open
!
dot11 ssid [wireless VLAN 1]
vlan 200
authentication open
!
dot11 ssid [wireless VLAN 2]
vlan 210
authentication open
infrastructure-ssid
!
dot11 ssid [unused wireless legacy VLAN]
vlan 250
authentication open
!
power inline negotiation prestandard source
!
!
username admin privilege 15 password 7 [sanitized key]
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 1 mode wep mandatory
!
encryption vlan 201 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 201 mode wep mandatory
!
encryption vlan 200 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 200 mode wep mandatory
!
encryption vlan 210 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 210 mode wep mandatory
!
encryption vlan 250 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 250 mode wep mandatory
!
ssid [unused management VLAN]
!
ssid [wireless VLAN 1]
!
ssid [wireless VLAN 2]
!
ssid [unused wireless legacy VLAN]
!
antenna gain 100
parent 1 [AP I want the repeater to associate with]
parent 2 [Another AP in range that I suppose might work]
station-role repeater
!
interface Dot11Radio0.1
encapsulation dot1Q 1
no ip route-cache
!
interface Dot11Radio0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
bridge-group 200 spanning-disabled
!
interface Dot11Radio0.201
encapsulation dot1Q 201
no ip route-cache
bridge-group 201
bridge-group 201 subscriber-loop-control
bridge-group 201 block-unknown-source
no bridge-group 201 source-learning
no bridge-group 201 unicast-flooding
bridge-group 201 spanning-disabled
!
interface Dot11Radio0.210
encapsulation dot1Q 210 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.250
encapsulation dot1Q 250
no ip route-cache
bridge-group 250
bridge-group 250 subscriber-loop-control
bridge-group 250 block-unknown-source
no bridge-group 250 source-learning
no bridge-group 250 unicast-flooding
bridge-group 250 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1
no ip route-cache
!
interface FastEthernet0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
no bridge-group 200 source-learning
bridge-group 200 spanning-disabled
!
interface FastEthernet0.201
encapsulation dot1Q 201
no ip route-cache
bridge-group 201
no bridge-group 201 source-learning
bridge-group 201 spanning-disabled
!
interface FastEthernet0.210
encapsulation dot1Q 210 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.250
encapsulation dot1Q 250
no ip route-cache
bridge-group 250
no bridge-group 250 source-learning
bridge-group 250 spanning-disabled
!
interface BVI1
ip address 10.1.50.7 255.255.255.0
no ip route-cache
!
ip default-gateway 10.1.50.1
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
sntp server [no snmp server at that ip anymore]
sntp broadcast client
end
~~~~~~~~~~~~~~~~START AP Unit Config~~~~~~~~~~~~~~~~
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname [AP I'd like to associate the Repeater with]
!
enable secret 5 [sanitized key]
enable password 7 [sanitized key]
!
clock timezone -0500 -5
clock summer-time -0400 recurring
ip subnet-zero
!
!
no aaa new-model
dot11 syslog
dot11 vlan-name Wireless vlan 200
dot11 vlan-name Wireless2 vlan 210
dot11 vlan-name WirelessManagement vlan 150
dot11 vlan-name PublicWireless vlan 126
!
dot11 ssid [wireless VLAN 1]
vlan 200
authentication open
information-element ssidl
!
dot11 ssid [wireless VLAN 2]
vlan 210
authentication open
information-element ssidl
!
dot11 network-map
!
!
username Cisco password 7 [sanitized key]
username admin privilege 15 password 7 [sanitized key]
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption key 1 size 128bit 7 [sanitized key] transmit-key
encryption mode wep mandatory
!
encryption vlan 126 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 126 mode wep mandatory
!
encryption vlan 200 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 200 mode wep mandatory
!
encryption vlan 210 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 210 mode wep mandatory
!
ssid [wireless VLAN 1]
!
ssid [wireless VLAN 2]
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel least-congested 2412 2437 2462
station-role root
antenna gain -128
!
interface Dot11Radio0.126
encapsulation dot1Q 126
no ip route-cache
bridge-group 126
bridge-group 126 subscriber-loop-control
bridge-group 126 block-unknown-source
no bridge-group 126 source-learning
no bridge-group 126 unicast-flooding
bridge-group 126 spanning-disabled
!
interface Dot11Radio0.150
encapsulation dot1Q 150 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
bridge-group 200 spanning-disabled
!
interface Dot11Radio0.210
encapsulation dot1Q 210
no ip route-cache
bridge-group 210
bridge-group 210 subscriber-loop-control
bridge-group 210 block-unknown-source
no bridge-group 210 source-learning
no bridge-group 210 unicast-flooding
bridge-group 210 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption key 1 size 128bit 7 [sanitized key] transmit-key
encryption mode wep mandatory
!
encryption vlan 126 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 126 mode wep mandatory
!
encryption vlan 200 key 1 size 128bit 7 [sanitized key]
encryption vlan 200 key 2 size 128bit 7 [sanitized key] transmit-key
encryption vlan 200 mode wep mandatory
!
encryption vlan 210 key 1 size 128bit 7 [sanitized key] transmit-key
encryption vlan 210 mode wep mandatory
dfs band 3 block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
!
interface Dot11Radio1.126
encapsulation dot1Q 126
no ip route-cache
bridge-group 126
bridge-group 126 subscriber-loop-control
bridge-group 126 block-unknown-source
no bridge-group 126 source-learning
no bridge-group 126 unicast-flooding
bridge-group 126 spanning-disabled
!
interface Dot11Radio1.150
encapsulation dot1Q 150 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
bridge-group 200 spanning-disabled
!
interface Dot11Radio1.210
encapsulation dot1Q 210
no ip route-cache
bridge-group 210
bridge-group 210 subscriber-loop-control
bridge-group 210 block-unknown-source
no bridge-group 210 source-learning
no bridge-group 210 unicast-flooding
bridge-group 210 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.126
encapsulation dot1Q 126
no ip route-cache
bridge-group 126
no bridge-group 126 source-learning
bridge-group 126 spanning-disabled
!
interface FastEthernet0.150
encapsulation dot1Q 150 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
no bridge-group 200 source-learning
bridge-group 200 spanning-disabled
!
interface FastEthernet0.210
encapsulation dot1Q 210
no ip route-cache
bridge-group 210
no bridge-group 210 source-learning
bridge-group 210 spanning-disabled
!
interface BVI1
ip address 10.1.15.100 255.255.255.0
no ip route-cache
!
ip default-gateway 10.1.15.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
snmp-server community public RO
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
password 7 [sanitized key]
login
line vty 5 15
password 7 [sanitized key]
login
!
sntp server [a different ip address from the repeater, but also one that is not an snmp server]
sntp broadcast client
end
