I have a second WLAN implmentation underway. We have 5 APs and a Cisco 3550 switch. I have deleted all the default vlans / ssids from the IOS AP1200 ver 12.2 and then created two new ones:
SSID GUEST associated to VLAN 10 Native
SSID Engineer associated to VLAN 11
When my clients connect to guest.Life is good. They can access the network but when they connect to Engineer they can't access the network.They can't even ping the AP. All my clients have static IPs. I did this to make sure DHCP wa sout of the trouble loop. Here is my config any ideas would be highly appreciated ...
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname AP-VLAN
!
username xxx password xxxx
clock timezone U -8
clock summer-time U recurring
ip subnet-zero
!
!
bridge irb
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers ckip
!
encryption vlan 11 mode ciphers ckip
!
ssid Guest
vlan 10
authentication open
guest-mode
!
ssid Engineer
vlan 11
authentication open
authentication network-eap eap_methods
!
speed basic-1.0 2.0 5.5 11.0
rts threshold 2312
power local 50
power client 50
station-role root
!
interface Dot11Radio0.10
encapsulation dot1Q 10 native
no ip route-cache
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
no cdp enable
bridge-group 11
bridge-group 11 subscriber-loop-control
bridge-group 11 block-unknown-source
no bridge-group 11 source-learning
no bridge-group 11 unicast-flooding
bridge-group 11 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
ntp broadcast client
!
interface FastEthernet0.10
encapsulation dot1Q 10 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.11
encapsulation dot1Q 11
no ip route-cache
bridge-group 11
no bridge-group 11 source-learning
bridge-group 11 spanning-disabled
!
interface BVI1
ip address 192.168.0.200 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.0.1
ip http server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag/ivory/1100
ip radius source-interface BVI1
logging facility auth
radius-server local
!
radius-server host x.x.0.92 auth-port 1645 acct-port 1646 key xxxx
radius-server retransmit 3
radius-server attribute 32 include-in-access-req format %h
radius-server authorization permit missing Service-Type
radius-server vsa send accounting
bridge 1 route ip
!
line con 0
line vty 5 15
!
end
AP-VLAN#
