CISCO AIronet 1200 Problem with Clients Accessing Internet

[ciscofanclub]

My 1200 AP can ping 8.8.8.8.

Two Clients connected to AP can ping each other

The AP cant ping the client nor the client AP and clients cant get Internet Access.

Let me know if you want to see my config. Thx T

[Scott Fella]

Is your ap and clients on the same subnet/vlan?  Is your router providing nat for that subnet?  Make sure that the ap has a gateway configured and ip route statement.  Just look at some guides, but keep in mind that these aps are old.  Search Cisco autonomous basic configuration.

[ciscofanclub]

I don't think I can enter a default gateway and I do have access to the internet from within AP and can ping my gateway on router. It just seems the bridge is wrong or bridge-group? I have tried a few settings but still no internet for clients.

[ciscofanclub]

BTW the clients are android tablet and phone.

[ciscofanclub]

version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname FORKY
!
enable secret 5 $1$u4kg$Cw7ybLJA83jjYH7EKjlmY0
!
username Cisco password 7 02250D480809
ip subnet-zero
!
!
no aaa new-model
dot11 vlan-name WIFI10 vlan 10
!
dot11 ssid FORKWIFI
vlan 10
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode
wpa-psk ascii 7 060B002E42460C1801
!
dot11 network-map
!
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 10 mode ciphers tkip
!
ssid FORKWIFI
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
rts threshold 5
rts retries 6
packet retries 5
fragment-threshold 256
station-role root
beacon period 20
beacon dtim-period 4

bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
!
interface FastEthernet0
no ip address
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.10
encapsulation dot1Q 10
bridge-group 10
no bridge-group 10 source-learning
bridge-group 10 spanning-disabled
!
interface BVI1
ip address 10.1.1.25 255.255.255.248
no ip route-cache
!
ip default-gateway 10.1.1.26
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
!
control-plane

!
bridge 1 route ip
!
!
!
line con 0
transport preferred all
transport output all
line vty 0 4
login local
transport preferred all
transport input all
transport output all
line vty 5 15
login
transport preferred all
transport input all
transport output all
!
end

[Scott Fella]

Well if you define vlan 10 on the ap, do you have vlan 10 defined on the switch and router?  The ap is connected to a trunk port?

[TJ-20933766]

The BVI interface of the AP is in the native VLAN of whatever the directly connected switch interface is configured as (usually VLAN 1 unless otherwise specified). The switch interface should be a trunk allowing the native VLAN and VLAN 10 (the user VLAN). Do the users get IP addresses when they connect to the SSID via DHCP or are you assigning them addresses manually?

[ciscofanclub]

FInally found a decent guide!

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-wireless/826-cisco-wiress-air1242-mssid.html

Job done!

[TJ-20933766]

Would you mind sharing your solution to the problem or what the core issue was?

[ciscofanclub]

I believe it was bridge-group mismatch, once I only had one bridge-group it worked.