07-07-2021 04:18 PM
Hi Team,
I want to configure a wifi for people who comes to visit me on a Cisco AP AIR-LAP-1142N-E-K9.
dot11Radio 0 is configured good with wpa password on VLAN 40.
I am trying to create the guest on VLAN 50, outside the network, but it is not going online.
BTW is in standalone mode and not on a WLC.
Sometimes I get the following message when trying to broadcast the SSID:
*Feb 16 03:06:45.155: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radio1 not started.
Below is the following configuration:
dot11 ssid Contoso-Guests
vlan 50
authentication open
mbssid guest-mode
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 50 mode ciphers tkip
!
ssid Contoso-Guest
!
antenna gain 0
peakdetect
no dfs band block
mbssid
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface GigabitEthernet0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 spanning-disabled
no bridge-group 50 source-learning
Hope that this will be good explained and someone knows the trick.
07-08-2021 02:15 AM
Hi,
You need to assign SSID under interface, without that Radio interfaces won't come up.
Do this change and try again:
dot11 ssid Contoso-Guests
vlan 50
authentication open
mbssid guest-mode
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 50 mode ciphers tkip
!ssid Contoso-Guest
ssid Contoso-Guests
!
antenna gain 0
peakdetect
no dfs band block
mbssid
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
Regards
Dont forget to rate helpful posts
07-13-2021 12:43 PM
It is not working.. Here below the configuration:
WPA#show running-config
Building configuration...
no aaa new-model
no ip routing
no ip cef
no ip domain lookup
!
!
!
!
dot11 syslog
!
dot11 ssid Contoso-Employees
vlan 40
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii
!
dot11 ssid Contoso-Guest
vlan 50
authentication open
guest-mode
!
!
dot11 guest
!
!
!
username Cisco password
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 40 mode ciphers aes-ccm tkip
!
ssid Contonso-Employees
!
antenna gain 0
channel 2412
station-role root
!
interface Dot11Radio0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.40
encapsulation dot1Q 40
no ip route-cache
bridge-group 40
bridge-group 40 subscriber-loop-control
bridge-group 40 spanning-disabled
bridge-group 40 block-unknown-source
no bridge-group 40 source-learning
no bridge-group 40 unicast-flooding
!
interface Dot11Radio0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 subscriber-loop-control
bridge-group 50 spanning-disabled
bridge-group 50 block-unknown-source
no bridge-group 50 source-learning
no bridge-group 50 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption mode ciphers aes-ccm
!
encryption vlan 40 mode ciphers aes-ccm tkip
!
ssid Contonso-Guest
!
antenna gain 0
peakdetect
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.20
no ip route-cache
!
interface GigabitEthernet0.40
encapsulation dot1Q 40
no ip route-cache
bridge-group 40
bridge-group 40 spanning-disabled
no bridge-group 40 source-learning
!
interface GigabitEthernet0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 spanning-disabled
no bridge-group 50 source-learning
!
interface BVI1
ip address
no ip route-cache
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path
!
!
bridge 1 route ip
!
!
banner motd ^CWarning: Access for Authorized personel only^C
!
line con 0
line vty 0 4
login local
transport input all
!
end
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide