cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
661
Views
10
Helpful
2
Replies

AP Management interface

JLVB83
Level 1
Level 1

Hey folks I have a AIR-LAP1142N-A-K9 in autonomous mode, I have a couple SSID's associated to VLAN's that are working, but in my network I use VLAN 99 to be a management VLAN giving my devices address's to access them, now I'm trying to do the same with this AP with not much luck, from the research and trial and error it seems I need to do something with the BVI interface to get this done, now I don't have anything configured for VLAN 99 in the config at the moment because what I was trying seemed to screw things up.  Here is the config any help will be appreciated.  Thks

 

Using 2961 out of 32768 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
logging rate-limit console 9
enable secret 5 $1$rSVx$m9ZCDyyzYmje9ILU5fq3Z/
!
no aaa new-model
!
!
dot11 syslog
dot11 vlan-name MAIN vlan 3
dot11 vlan-name TEMP-WIFI vlan 4
!
dot11 ssid MAIN-WIFI
vlan 3
authentication shared
mbssid guest-mode
!
dot11 ssid TEST-WIFI
vlan 4
authentication shared
mbssid guest-mode
!
!
!
username Cisco password 7 032752180500
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption vlan 4 key 1 size 128bit 7 5FDAC878443167AA9803CCE1230C transmit-key
encryption vlan 4 mode ciphers aes-ccm tkip wep128
!
encryption vlan 3 key 1 size 128bit 7 E467AA9803CCEEF3D647D478330C transmit-key
encryption vlan 3 mode ciphers aes-ccm tkip wep128
!
ssid MAIN-WIFI
!
ssid TEST-WIFI
!
antenna gain 0
dfs band 3 block
mbssid
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio1.4
encapsulation dot1Q 4
no ip route-cache
bridge-group 4
bridge-group 4 subscriber-loop-control
bridge-group 4 block-unknown-source
no bridge-group 4 source-learning
no bridge-group 4 unicast-flooding
bridge-group 4 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface GigabitEthernet0.4
encapsulation dot1Q 4
no ip route-cache
bridge-group 4
no bridge-group 4 source-learning
bridge-group 4 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local

 

 

1 Accepted Solution

Accepted Solutions

Sandeep Choudhary
VIP Alumni
VIP Alumni

you need to add few commands:

 

----

interface GigabitEthernet0.99
encapsulation dot1Q 99 native
bridge-group 1
!
interface Dot11Radio1.99
encapsulation dot1Q 99 native
bridge-group 1
!
interface BVI1
ip address <one of the IP in vlan 99>

 

 

----

 

 

Regards

Dont forget to rate helpful posts

View solution in original post

2 Replies 2

Sandeep Choudhary
VIP Alumni
VIP Alumni

you need to add few commands:

 

----

interface GigabitEthernet0.99
encapsulation dot1Q 99 native
bridge-group 1
!
interface Dot11Radio1.99
encapsulation dot1Q 99 native
bridge-group 1
!
interface BVI1
ip address <one of the IP in vlan 99>

 

 

----

 

 

Regards

Dont forget to rate helpful posts

Thank you, I was missing one thing myself, I did not have my switchport trunk set to native vlan 99, once I did that I could access the AP.

 

THKS

Review Cisco Networking products for a $25 gift card