couldn't ping to client behind Aironet 1231

[MrJohnDoe]

Hello people,

I hope you can help me on a problem we have.

We have configured 3 AP1231 for roaming and use wireless barcodescanners as clients. They run Windows CE.

When we are pinging from those clients into our wired LAN it works and we become reply.

But when we try to ping from a wired LAN-Client to the mobile device or from one mobile device to another, we don't get a repley.

For one software we need to ping from our server to the W-LAN-Clients, what doesn't work.

Is there some kind of filter on the AP's , which block every ICMP-message from LAN ton W-LAN? I have searched the guide and the web-configuration, but didn't found anything.

We have set a mac-adress-filter for the incoming and outgoing w-lan port. But I have deactivated it and it wasn't the problem.

Can you help me on this problem?

[scottmac]

In the WebGUI, go to the interfaces section (I think), and look for "Public Secure Packet Forwarding" (PSPF) and disable it.

PSPF prevents one wireless user from accessing other woreless users. It's a feature for "hotspot" locations to provide users some additional security.

Check it out and let us know.

Good Luck

Scott

[MrJohnDoe]

Thank you for your hint.

Unfortunaly, this is already deactivated.

We also couldn't ping from our LAN-Clients to our W-LAN-Clients.

Is there some kind of filter somewhere, which blocks ICMP?

[scottmac]

Are you using multiple SSIDs and / or VLANs?

If so, do you have a layer three device (router, L3 Switch) to permit the VLANs to talk to each other?

Even though they are resident in a single physical device, they are logically separate broadcast domains and can't talk to each other without a router / routing device.

There are no default filters that would block ICMP traffic.

Good Luck

Scott

[MrJohnDoe]

No, we use no VLAN and only one SSID.

We use them as simple access points.

We use three of them with the same SSID and Encryption as roaming.

But they are all configured as normal AP.

[oj88]

Could be that the wireless clients themselves are not configured to reply to pings.

[kahl_z]

What IOS version are you using? I have experienced similiar problems with IOS 12.3.8JA2. Cisco TAC think this will be resolved with 12.3.11JA. A workaround I found with this problem is to stacically configure the ARP entries on the divices trying to get to the wireless devices.

Zak