Hello,
I have an 871 set up at home with 2 VLANs, both of these vlans present a strange behavior where an user is unable to ping/contact another user on the same subnet, however if users are on different subnet it seems to work
According to the troubleshooting that I have done, the issue seems to be with the broadcast traffic, ARP request/reply do not reach another host on the same subnet (wireless to wireless or wired to wireless) however if the wireless device iniciates the connection to wired, it works fine.
This is a section of the config I have.
dot11 ssid office
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
dot11 ssid home
vlan 2
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 03510E5E5456711C1E5F4F
!
bridge irb
interface FastEthernet0
description Corporate office
spanning-tree portfast
!
interface FastEthernet1
description Corporate office
spanning-tree portfast
!
interface FastEthernet2
description home
switchport access vlan 2
no cdp enable
spanning-tree portfast
!
interface FastEthernet3
description home
switchport access vlan 2
no cdp enable
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers tkip
!
encryption mode ciphers tkip
!
encryption vlan 2 mode ciphers tkip
!
broadcast-key vlan 1 change 50
!
!
ssid office
!
ssid home
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
packet retries 32
channel 2462
station-role root
rts threshold 2312
rts retries 50
antenna receive right
antenna transmit left
antenna gain 128
no cdp enable
!
interface Dot11Radio0.1
description office
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.2
description Home
encapsulation dot1Q 2
no cdp enable
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Vlan1
description office
no ip address
ip nat inside
ip virtual-reassembly
load-interval 30
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Vlan2
description Home
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
I have tried to enable proxy arp on the different VLANs and BVI and different combinations but no sucess in order to get traffic across 2 wireless devices on the same subnet or a connection that is iniciated for a wired client to a wireless one.
Play with the native vlan but no luck either
Finally I tried enabling and disabling dot11 arp-cache but no luck
Any ideas?
Jorge
