Hi Group, I just been looking into lab 3.8 in the IPX-WB1. Radio Roles - Repeater.
Most of the things I have done works perfectly, the repeater AP associates with the root AP and I can see that it is using LEAP WPA as I wanted. Associated To AP AP1 001a.302e.4850 [LEAP WPA]. But the part I can't get to work is: "Ensure that users would be able to get a DHCP address in the 10.10.12.0/24 subnet. Do not configure DHCP for this." In the DSG VLAN 12 on the AP1-d0 interface have been made native and in my mind that would map it to the d0 interface on AP2. When I connect with a client to AP1, I get the 10.10.12.0/24 DHCP offer right away. When I connect to the AP2 I never get an offer (or see request at the dhcp server). The ADU client associates fine with both AP1 and AP2: Interface Dot11Radio0, Station WL02-LAPTOP 0040.96b1.8207 Associated KEY_MGMT[WPA] Did Jason just become lucky in the DSG or is something missing? /Ralph
hostname AP1 ! aaa new-model ! aaa group server radius Rad-local server 10.10.110.100 auth-port 1812 acct-port 1813 ! aaa authentication login default local aaa authentication login eap_methods group Rad-local aaa session-id common ! dot11 ssid Repeater-rao vlan 12 authentication network-eap eap_methods authentication key-management wpa ! bridge irb ! interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 12 mode ciphers tkip ! ssid Repeater-rao ! mbssid speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root infrastructure-client bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Dot11Radio0.12 encapsulation dot1Q 12 native no ip route-cache bridge-group 12 bridge-group 12 subscriber-loop-control bridge-group 12 block-unknown-source no bridge-group 12 source-learning no bridge-group 12 unicast-flooding bridge-group 12 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto hold-queue 160 in ! interface FastEthernet0.12 encapsulation dot1Q 12 no ip route-cache bridge-group 12 no bridge-group 12 source-learning bridge-group 12 spanning-disabled ! interface FastEthernet0.110 encapsulation dot1Q 110 native no ip route-cache bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 10.10.110.100 255.255.255.0 no ip route-cache ! ! radius-server local no authentication eapfast no authentication mac nas 10.10.110.100 key 7 151B1B091C3A2E363C user repeater nthash 7 112B40204334595E5D7B79027B1266723522422055700D0B01075D5A39477F7E05 ! radius-server host 10.10.110.100 auth-port 1812 acct-port 1813 key 7 020F145E13160A3358 ! ! bridge 1 route ip
hostname AP2 ! aaa new-model ! aaa group server radius Rad-local server 10.10.110.101 auth-port 1812 acct-port 1813 ! aaa authentication login default local aaa authentication login eap_methods group Rad-local aaa session-id common ! dot11 ssid Repeater-rao authentication open eap eap_methods authentication network-eap eap_methods authentication key-management wpa dot1x credentials LEAP dot1x eap profile LEAP infrastructure-ssid ! eap profile LEAP method leap ! dot1x credentials LEAP username repeater password 7 04521B031731495C1D ! bridge irb ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers tkip ! ssid Repeater-rao ! parent 1 001a.302e.4850 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role repeater infrastructure-client bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface BVI1 ip address 10.10.110.101 255.255.255.0 no ip route-cache ! radius-server local no authentication eapfast no authentication mac nas 10.10.110.101 key 7 141E020E14142F3930 user repeater nthash 7 123B5C32462D5E56737A760E6014714321335722027F0C00065D504137087E7101 ! radius-server host 10.10.110.101 auth-port 1812 acct-port 1813 key 7 011A1601431B031D35 ! bridge 1 route ip
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
