Hi Kristjan,
I still haven't found a way to make it work with vlans on the radio
interface. My VLAN config is in the WLAN20native-WPA-RootAP.txt file.
I did 4 scenarios this evening.
1. Simple root ap with repeater ap all on native vlan 1 and
bridge-group1. I attached the 2 configs. Simple-WPA. This is as I see
it as vanilla as it gets. And it works perfectly.
2. Same config but the Root AP now has bridge group 20 assigned to the
d0 interface and fas0.20 interface. Fa0.20 is dot1q vlan 20. I have
attached the 2 files. (BridgeG20-d0-WPA). This also works but I did
have to reboot the root-ap as the mac of the laptop client was stuck
in bridge 1 mac table.
3. The ssid on the root ap now has a VLAN 20 assigned to it and the
bridge-group 20 has been moved to interface d0.20. d0.20 is encap dot1
20 native. The Repeater AP and the client can associate with the Root
AP and get full IP traffic to VLAN 20. But when the client connects to
the Repeater AP it never gets an IP. The laptop client is simply not
seen as a dot11 association on the root ap. (Config VLAN20native)
4. This is the funny part. My saved config from step 2 is now copied
into the startup-config on both AP's and they are reloaded. They come
up again and now it doesn't work. Reload the laptop, try another. Nope
just don't work. Start pinging from the Repeater AP BVI1 to the
Default Gateway in VLAN 20, and that works fine. 30 seconds later the
laptop gets an IP. So my note being..... you need luck... :o)
/Ralph
2011/1/31 Kristján Ólafur Eðvarðsson <[email protected]>:
> I would be interesting to post your configurations for this.
> I remember having this at Bootcamp and made it work. There is
> one special think I remember. The AP-to-AP communication SSID+VLAN
> is always native. Others are tagged. The thing is that the communication
> goes over the native vlan but the Repeater and Root somehow bridge them
> over and put them on correct VLAN after the traffic is passed between the two.
> I don´t have IPX workbook, but I had a similar case in Fastlanes workbook.
> The user had a seperate SSID and repeater had another to communicate to Root
> on the native vlan.
>
> regards. Kristjan
> ------------------------------
>
> Message: 5
> Date: Sun, 30 Jan 2011 14:59:24 +0100
> From: Ralph Olsen <[email protected]>
> To: [email protected]
> Subject: Re: [CCIE Wireless] IPX-WB1 LAB 3.8 - Repeater
> Message-ID:
> <[email protected]>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Conclusion after looking deeper into this. You need luck to make it work. :o)
>
> I have tried a lot of different combos and boilded it down to a SSID
> with auth open. When the PC connect directly to the root AP it works
> fine and gets an IP from a different VLAN that bridge-group one (vlan
> 12 in the WB), but when it connects to the Repeater AP it doesn't
> work. When the PC is on the repeater AP the traffic is unidirectional
> only working from the PC -> repeater -> rootap -> Def.gw. Traffic in
> the other direction gets cut off at the rootap.
>
> Can someone else try to make 3.8 work?
>
> /Ralph
>
> 2011/1/28 Ralph Olsen <[email protected]>:
>> Hi Group,
>>
>> I just been looking into lab 3.8 in the IPX-WB1. Radio Roles - Repeater.
>>
>> Most of the things I have done works perfectly, the repeater AP
>> associates with the root AP and I can see that it is using LEAP WPA as
>> I wanted. ?Associated To AP AP1 001a.302e.4850 [LEAP WPA].
>>
>> But the part I can't get to work is: "Ensure that users would be able
>> to get a DHCP address in the 10.10.12.0/24 subnet. Do not configure
>> DHCP for this."
>>
>> In the DSG VLAN 12 on the AP1-d0 interface have been made native and
>> in my mind that would map it to the d0 interface on AP2. When I
>> connect with a client to AP1, I get the 10.10.12.0/24 DHCP offer right
>> away. When I connect to the AP2 I never get an offer (or see request
>> at the dhcp server).
>>
>> The ADU client associates fine with both AP1 and AP2: Interface
>> Dot11Radio0, Station WL02-LAPTOP 0040.96b1.8207 Associated
>> KEY_MGMT[WPA]
>>
>> Did Jason just become lucky in the DSG or is something missing?
>>
>> /Ralph
>>
>
>
> ------------------------------
>
> _______________________________________________
> CCIE_Wireless mailing list
> [email protected]
> http://onlinestudylist.com/cgi-bin/mailman/listinfo/ccie_wireless
>
>
> End of CCIE_Wireless Digest, Vol 22, Issue 41
> *********************************************
>
Current configuration : 1879 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RepeaterAP
!
enable secret 5 $1$YtU7$vNA9np1Vsr.LW64QX4D0M0
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local
aaa session-id common
!
dot11 ssid BOB
authentication open
authentication key-management wpa
infrastructure-ssid
wpa-psk ascii 7 055A545C7519185E415C47
!
power inline negotiation prestandard source
!
!
username Cisco password 7 032752180500
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid BOB
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
station-role repeater
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface BVI1
ip address dhcp
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
************ Moved the repeaterAP BVI to DHCP and gets a VLAN 20 IP ********
RepeaterAP#sh ip int brief
Interface IP-Address OK? Method Status
Protocol
BVI1 192.168.20.11 YES DHCP up up
Dot11Radio0 unassigned YES TFTP up up
Dot11Radio1 unassigned YES NVRAM administratively down
down
FastEthernet0 unassigned YES NVRAM down
down
Virtual-Dot11Radio0 unassigned YES TFTP up up
************ And traffic flows like a charm ********
RepeaterAP#ping 192.168.20.1 repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 1/1/4 ms
RepeaterAP#
RootAP#sh run
Building configuration...
Current configuration : 2104 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RootAP
!
enable secret 5 $1$jd.R$Q4tcGQLg/BVae9z.n5OKH.
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local-case
aaa session-id common
!
dot11 ssid BOB
authentication open
authentication key-management wpa
wpa-psk ascii 7 040A59555B741A19514055
!
power inline negotiation injector 001e.beb0.e8e7
power inline negotiation prestandard source
!
!
username Cisco password 7 062506324F41
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid BOB
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
channel 2462
station-role root
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface FastEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
!
interface BVI1
ip address 192.168.1.14 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
************* Client connected directly to the Root AP and the Bridge Group
trick works like a charm. *******
RootAP#sh dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [BOB] :
MAC Address IP address Device Name Parent
State
0016.cfa9.db97 192.168.20.10 unknown - self
Assoc
RootAP#sh dot11 associations al
RootAP#sh dot11 associations all-client
Address : 0016.cfa9.db97 Name : NONE
IP Address : 192.168.20.10 Interface : Dot11Radio 0
Device : unknown Software Version : NONE
CCX Version : NONE
State : Assoc Parent : self
SSID : BOB VLAN : 0
Hops to Infra : 1 Association Id : 8
Clients Associated: 0 Repeaters associated: 0
Tunnel Address : 0.0.0.0
Key Mgmt type : WPA PSK Encryption : TKIP
Current Rate : 54.0 Capability : WMM ShortHdr
Supported Rates : 1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates : disabled
Signal Strength : -56 dBm Connected for : 21 seconds
Signal to Noise : 37 dBm Activity Timeout : 59 seconds
Power-save : Off Last Activity : 1 seconds ago
Apsd DE AC(s) : NONE
Packets Input : 206 Packets Output : 46
Bytes Input : 39357 Bytes Output : 6423
Duplicates Rcvd : 0 Data Retries : 0
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
Session timeout : 0 seconds
Reauthenticate in : never
RootAP#
Building configuration...
Current configuration : 1901 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RepeaterAP
!
enable secret 5 $1$YtU7$vNA9np1Vsr.LW64QX4D0M0
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local
aaa session-id common
!
dot11 ssid BOB
authentication open
authentication key-management wpa
infrastructure-ssid
wpa-psk ascii 7 055A545C7519185E415C47
!
power inline negotiation prestandard source
!
!
username Cisco password 7 032752180500
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid BOB
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
station-role repeater
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface BVI1
ip address 192.168.1.13 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
RepeaterAP#sh dot11 ass
802.11 Client Stations on Dot11Radio0:
SSID [BOB] :
MAC Address IP address Device Name Parent
State
0016.cfa9.db97 192.168.1.21 unknown - self
Assoc
001e.4a55.d590 192.168.1.14 ap1130-Parent RootAP -
Assoc
RepeaterAP#sh dot11 ass al
Address : 0016.cfa9.db97 Name : NONE
IP Address : 192.168.1.21 Interface : Dot11Radio 0
Device : unknown Software Version : NONE
CCX Version : NONE
State : Assoc Parent : self
SSID : BOB VLAN : 0
Hops to Infra : 2 Association Id : 8
Clients Associated: 0 Repeaters associated: 0
Tunnel Address : 0.0.0.0
Key Mgmt type : WPA PSK Encryption : TKIP
Current Rate : 54.0 Capability : WMM ShortHdr
Supported Rates : 1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates : disabled
Signal Strength : -38 dBm Connected for : 91 seconds
Signal to Noise : 61 dBm Activity Timeout : 60 seconds
Power-save : Off Last Activity : 0 seconds ago
Apsd DE AC(s) : NONE
Packets Input : 354 Packets Output : 132
Bytes Input : 27377 Bytes Output : 14762
Duplicates Rcvd : 0 Data Retries : 1
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
Session timeout : 0 seconds
Reauthenticate in : never
Address : 001e.4a55.d590 Name : RootAP
IP Address : 192.168.1.14 Interface : Dot11Radio 0
Device : ap1130-Parent Software Version : 12.3
CCX Version : NONE
State : Assoc Parent : Our Parent
SSID : BOB VLAN : 0
Hops to Infra : 0 Association Id : 7
Tunnel Address : 0.0.0.0
Key Mgmt type : WPA PSK Encryption : TKIP
Current Rate : 54.0 Capability : WMM ShortHdr ShortSlot
Supported Rates : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates : disabled
Signal Strength : -61 dBm Connected for : 93 seconds
Signal to Noise : 38 dBm Activity Timeout : 15 seconds
Power-save : Off Last Activity : 0 seconds ago
Apsd DE AC(s) : NONE
Packets Input : 1351 Packets Output : 329
Bytes Input : 211878 Bytes Output : 38206
Duplicates Rcvd : 0 Data Retries : 0
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
RepeaterAP#
Building configuration...
Current configuration : 1938 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RootAP
!
enable secret 5 $1$jd.R$Q4tcGQLg/BVae9z.n5OKH.
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local-case
aaa session-id common
!
dot11 ssid BOB
authentication open
authentication key-management wpa
wpa-psk ascii 7 040A59555B741A19514055
!
power inline negotiation injector 001e.beb0.e8e7
power inline negotiation prestandard source
!
!
username Cisco password 7 062506324F41
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid BOB
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
channel 2462
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface BVI1
ip address 192.168.1.14 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
RootAP#sh dot11 as
RootAP#sh dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [BOB] :
MAC Address IP address Device Name Parent
State
0016.cfa9.db97 192.168.1.21 Rptr-client - 0026.0b4d.62be
Assoc
0026.0b4d.62be 192.168.1.13 ap1240-Rptr RepeaterAP self
Assoc
RootAP#sh dot11 as
RootAP#sh dot11 associations al
RootAP#sh dot11 associations all-client
Address : 0016.cfa9.db97 Name : NONE
IP Address : 192.168.1.21 Interface : Dot11Radio 0
Device : Rptr-client Software Version : NONE
CCX Version : NONE
State : Assoc Parent : 0026.0b4d.62be
SSID : BOB VLAN : 0
Hops to Infra : 0
Clients Associated: 0 Repeaters associated: 0
Address : 0026.0b4d.62be Name : RepeaterAP
IP Address : 192.168.1.13 Interface : Dot11Radio 0
Device : ap1240-Rptr Software Version : 12.3
CCX Version : NONE
State : Assoc Parent : self
SSID : BOB VLAN : 0
Hops to Infra : 1 Association Id : 5
Clients Associated: 1 Repeaters associated: 0
Tunnel Address : 0.0.0.0
Key Mgmt type : WPA PSK Encryption : TKIP
Current Rate : 54.0 Capability : WMM ShortHdr ShortSlot
Supported Rates : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates : disabled
Signal Strength : -56 dBm Connected for : 71 seconds
Signal to Noise : 39 dBm Activity Timeout : 30 seconds
Power-save : Off Last Activity : 0 seconds ago
Apsd DE AC(s) : NONE
Packets Input : 982 Packets Output : 343
Bytes Input : 156350 Bytes Output : 37855
Duplicates Rcvd : 0 Data Retries : 9
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
Session timeout : 0 seconds
Reauthenticate in : never
RootAP#
Building configuration...
Current configuration : 1879 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RepeaterAP
!
enable secret 5 $1$YtU7$vNA9np1Vsr.LW64QX4D0M0
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local
aaa session-id common
!
dot11 ssid BOB
authentication open
authentication key-management wpa
infrastructure-ssid
wpa-psk ascii 7 055A545C7519185E415C47
!
power inline negotiation prestandard source
!
!
username Cisco password 7 032752180500
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid BOB
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
station-role repeater
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface BVI1
ip address dhcp
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
***************** Client can't get an IP adresse. ****************
RepeaterAP#sh dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [BOB] :
MAC Address IP address Device Name Parent
State
0016.cfa9.db97 0.0.0.0 unknown - self
Assoc
001e.4a55.d590 192.168.1.14 ap1130-Parent RootAP -
Assoc
RepeaterAP#sh bri
RepeaterAP#sh bridge
Total of 300 station blocks, 298 free
Codes: P - permanent, S - self
Bridge Group 1:
Address Action Interface Age RX count TX count
0016.cfa9.db97 forward Dot11Radio0 P 111 0
RepeaterAP#sh bridge ver
RepeaterAP#sh bridge verbose
Total of 300 station blocks, 298 free
Codes: P - permanent, S - self
BG Hash Address Action Interface VC Age RX count TX count
1 4C/0 0016.cfa9.db97 forward Dot11Radio0 - P 115 0
Flood ports (BG 1) RX count TX count
Dot11Radio0 0 3779
Dot11Radio1 0 0
FastEthernet0 5 0
Virtual-Dot11Radio0 2324 1455
RepeaterAP#
Building configuration...
Current configuration : 2208 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RootAP
!
enable secret 5 $1$jd.R$Q4tcGQLg/BVae9z.n5OKH.
!
ip subnet-zero
no ip domain lookup
!
!
aaa new-model
!
!
aaa authentication login default local-case
aaa session-id common
!
dot11 ssid BOB
vlan 20
authentication open
authentication key-management wpa
wpa-psk ascii 7 040A59555B741A19514055
!
power inline negotiation injector 001e.beb0.e8e7
power inline negotiation prestandard source
!
!
username Cisco password 7 062506324F41
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 20 mode ciphers tkip
!
ssid BOB
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
48.0 54.0
channel 2462
station-role root
!
interface Dot11Radio0.20
encapsulation dot1Q 20 native
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
hold-queue 160 in
!
interface FastEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
!
interface BVI1
ip address 192.168.1.14 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
privilege level 15
logging synchronous
line vty 0 4
!
end
RootAP#sh bri
RootAP#sh bridge ver
RootAP#sh bridge verbose
Total of 300 station blocks, 297 free
Codes: P - permanent, S - self
Flood ports (BG 1) RX count TX count
Dot11Radio0.20 0 1662
Dot11Radio1 0 0
FastEthernet0 2095 0
Virtual-Dot11Radio0.20 0 0
BG Hash Address Action Interface VC Age RX count TX count
20 DC/0 0026.0b4d.62be forward Do0.20 - P 1 0
Flood ports (BG 20) RX count TX count
Dot11Radio0.20 0 449
FastEthernet0.20 256 244
Virtual-Dot11Radio0 0 0
************ Client is never seen as a Client station on Parent *******
RootAP#sh dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [BOB] :
MAC Address IP address Device Name Parent
State
0026.0b4d.62be 192.168.20.11 ap1240-Rptr RepeaterAP self
Assoc
RootAP#
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
