02-05-2021 09:56 AM - edited 07-05-2021 01:11 PM
My 1200 AP can ping 8.8.8.8.
Two Clients connected to AP can ping each other
The AP cant ping the client nor the client AP and clients cant get Internet Access.
Let me know if you want to see my config. Thx T
02-05-2021 10:04 AM
Is your ap and clients on the same subnet/vlan? Is your router providing nat for that subnet? Make sure that the ap has a gateway configured and ip route statement. Just look at some guides, but keep in mind that these aps are old. Search Cisco autonomous basic configuration.
02-05-2021 10:08 AM
I don't think I can enter a default gateway and I do have access to the internet from within AP and can ping my gateway on router. It just seems the bridge is wrong or bridge-group? I have tried a few settings but still no internet for clients.
02-05-2021 10:09 AM
BTW the clients are android tablet and phone.
02-05-2021 10:12 AM
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname FORKY
!
enable secret 5 $1$u4kg$Cw7ybLJA83jjYH7EKjlmY0
!
username Cisco password 7 02250D480809
ip subnet-zero
!
!
no aaa new-model
dot11 vlan-name WIFI10 vlan 10
!
dot11 ssid FORKWIFI
vlan 10
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode
wpa-psk ascii 7 060B002E42460C1801
!
dot11 network-map
!
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 10 mode ciphers tkip
!
ssid FORKWIFI
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
rts threshold 5
rts retries 6
packet retries 5
fragment-threshold 256
station-role root
beacon period 20
beacon dtim-period 4
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
!
interface FastEthernet0
no ip address
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.10
encapsulation dot1Q 10
bridge-group 10
no bridge-group 10 source-learning
bridge-group 10 spanning-disabled
!
interface BVI1
ip address 10.1.1.25 255.255.255.248
no ip route-cache
!
ip default-gateway 10.1.1.26
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
transport preferred all
transport output all
line vty 0 4
login local
transport preferred all
transport input all
transport output all
line vty 5 15
login
transport preferred all
transport input all
transport output all
!
end
02-05-2021 10:35 AM
Well if you define vlan 10 on the ap, do you have vlan 10 defined on the switch and router? The ap is connected to a trunk port?
02-05-2021 10:45 AM
The BVI interface of the AP is in the native VLAN of whatever the directly connected switch interface is configured as (usually VLAN 1 unless otherwise specified). The switch interface should be a trunk allowing the native VLAN and VLAN 10 (the user VLAN). Do the users get IP addresses when they connect to the SSID via DHCP or are you assigning them addresses manually?
02-05-2021 10:46 AM
FInally found a decent guide!
Job done!
02-05-2021 11:01 AM
Would you mind sharing your solution to the problem or what the core issue was?
02-05-2021 02:01 PM
I believe it was bridge-group mismatch, once I only had one bridge-group it worked.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide