Best practice configuring 2602i aironet 50-70 users.

[butchoi_seso]

Hi Im new to cisco wireless AP.

I need your advice and best way to configure wireless AP. we have 50-70 users in 2 buildings  3 storey. 2 vlans

I have 2 cisco aironet 2602i and 1 1142 aironet.. it is okey if AP-1142 to be access points? and 2 -2602i will be the bridge? can anyone give me configurations?

Thanks

[Rasika Nayanajith]

Hi

seems like I am not helping you. so far no ratings :(

Anyway , to be clear please provide this info (represent in X)

vlan 10 - 172..x.x.0/24 (SSID name : xxxx)

vlan 20 - 172.x.x.0/24  (SSID name : xxxx)

vlan x  -  172.22.7.0 /24

Note that BVI interface should be un-tagged. So vlan X should be the native vlan of the trunk link. If 172.22.7.0/24 is not suitable for that you need to choose a different subnet for AP management.(in otherwords that subnet cannot be use for AP management IP & given for user under SSID configuration)

HTH

Rasika

**** Pls rate all useful responses ***

[butchoi_seso]

Hi Rasika,

I'm not aware the ratings sorry, let me check this so i can rate your answers.

You help a lot rasika your time and efforts is enough and most of all the configurations you send to me. your a bright cisco engineer. :)

Anyway , to be clear please provide this info (represent in X)

vlan 10 - 172..22.7.0/24 (SSID name : TODO_AP1)

vlan 20 - 172.22.10.0/24  (SSID name : TODO_AP1)

vlan x  -  172.21.10.0 /24

[Rasika Nayanajith]

here are few things to note here.

You cannot assign two vlan for the same SSID in autonomous AP. if you want single SSID, then you have to choose one vlan.

You mentioned you would like to put 172.22.7.34 for the AP which is vlan 10. Since you wan to use this vlan for SSID (wireless users traffic will tag to vlan 10), you cannot use the same vlan for AP management which should be untagged.

You need to have separate vlan/subnet to assign for AP management. You can assign vlan 1 if it is ok  & if you have defined gateway for vlan 1 on your switch.

Once we clear on this I can post you the required configuration.

by the way thanks for using the rating system :)

HTH

Rasika

[butchoi_seso]

Hi Rasika,

If i can't assign two vlans for the same SSID is there other configurations for this?

what should be the best way to use 2 AP's one SSID in my network with all the vlans and subnets we have?

Here is the configurations of the L3 switch

interface Vlan1
 no ip address
!
interface Vlan10
 ip address 172.22.10.2 255.255.255.0
 ip helper-address 172.22.x.x
!
interface Vlan20
 ip address 172.22.7.2 255.255.255.0
 ip helper-address 172.22.x.x.

Please advise

[Rasika Nayanajith]

What's the point of assigning all current wired user vlans to the wireless network. Typically it is good practice to assign a separate subnet for wireless users rather than mixing wireless users into wired subnets.

If I was you, I will create another vlan (let's say 25) for wireless users & configure a single SSID on all those 3 AP & assign vlan 25. In this way wireless users can move around without changing thier IP/etc (roaming)

Hope that make sense.

What is your exact business requirement  of this wireless network ?

HTH

Rasika

[butchoi_seso]

Hi Rasika,

Okey i'm good to your suggestions, what should be the configurations for...

*Separate vlans-wireless users
*Single SSID on all those 3 AP & assign vlan 25.

Thanks,

[Rasika Nayanajith · Accepted solution]

If you ok with that here is what you have to do.

vlan 25 - 172.22.25.0/24

1. Define this L2 vlan on your switch

2. Define SVI for vlan 25 (int vlan 25) & assign 172.22.25.2 /24 (assuming it is the correct gateway IP you want to have)

3. Define DHCP pool for vlan 25 (assume first 20 addresses reserved for APs & SVI). Follow the same configuration options you given for vlan 10,20. So wireless users will get IP in the range of 172.22.25.21 - 172.22.25.254

4. Configure the below configuration on AP-01 & do the same on AP-02 & AP-03 with modified BVI IP & hostname. (I used WLAN password, hostname, SSID given in your config- if you need modify those)

AP-01 : 172.22.25.11/24

AP-02 : 172.22.25.12/24

AP-03 : 172.22.25.13/24

conf t
hostname LEDO_AP01
!
dot11 ssid LEDO_WIFI
   authentication open
   authentication key-management wpa version 2
   guest-mode
   wpa-psk ascii 7 03035704040E2D5C411E1C17
!
interface Dot11Radio0
 encryption mode ciphers aes-ccm
 ssid LEDO_WIFI
 no shutdown
!
interface Dot11Radio1
 channel width 40-above
 encryption mode ciphers aes-ccm
 ssid LEDO_WIFI
 no shutdown
!
interface BVI1
 ip address 172.22.25.11 255.255.255.0
!
ip default-gateway 172.22.25.2
end
write memory
!

5. Configure 3 switchports for access vlan 25 & plug those 3 AP. Here is a sample config for a switchport.

interface gx/x
description Access Point
switchport mode access
switchport access vlan 25
spanning-tree portfast

6. Test your wireless connectivity

Give us a try & let us know if you have any further queries.

HTH

Rasika

**** Pls rate all useful responses ****

[butchoi_seso]

Hi Rasika,

Thanks for the reply, How can i erase the previous configurations for all the AP's?

I don't want to reset default (by pressing mode button)because start up config will be erase the autonomous which i load from the start up config.

Thanks

[Rasika Nayanajith · Accepted solution]

Hi

You simply require erase the startup-config & reload without saving.

AP#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete

AP#reload
System configuration has been modified. Save? [yes/no]: no
Proceed with reload? [confirm]

Once reloaded, you can apply the new configurations

HTH

Rasika

[butchoi_seso]

Hi Rasika,

its seems working now, please see attached for your comments!

[Rasika Nayanajith]

Good to hear that.

By the way cannot see an attachment

Rasika

[butchoi_seso]

Oh im sorry, Please see attached.

for your comments.

[Rasika Nayanajith]

looks good.

If you do "show dot11 association" in AP CLI you will get same detail. Does both 2.4GHz & 5GHz radio enable & clients associate in both bands ?

HTH

Rasika

[butchoi_seso]

Hi Rasika,

Thanks again for the reply! I got all the instructions you given me. i give you 2 cups of Starbucks cafe for the good tutorial.

note: 2 AP is now active.

Please see attached again.

for your advise 

[Rasika Nayanajith]

Very good to see that you get it working.. though it took some time , I think you finally managed it well.

Once everything ok (all 3 AP setup) you can mark this thread as answered.

Thanks for the appreciation & give us a shout for any Cisco wireless queries in future.

Rasika