Just for managment,
I wasn't able to ping from mgt int on ap to PF vlan int IP.
-W
-
Wade Blackwell
"Integrity is often more painful and always more profitable than
perception management"
On Tue, 2007-12-18 at 21:03 -0700, RB wrote:
> What do you mean you can't pass traffic? You can't get ICMP off of a
> wireless client, can't ping the VLAN interface, what?
>
> When I hooked my 1230 directly up to my pfSense system, I couldn't
> reach VLAN interfaces on the AP, I had to use BVIs. If I may ask, why
> do you need a layer 3 interface on the AP (other than mgt) anyway?
>
> To address Curtis' note, mine is talking on the 'native' VLAN just fine.
>
> Correct or not, an excerpt from mine:
>
> interface Dot11Radio0
> no ip address
> no ip route-cache
> no dot11 extension aironet
> no cdp enable
> bridge-group 1
> bridge-group 1 block-unknown-source
> no bridge-group 1 source-learning
> no bridge-group 1 unicast-flooding
> bridge-group 1 spanning-disabled
> !
> interface Dot11Radio0.20
> encapsulation dot1Q 20
> no ip route-cache
> no cdp enable
> bridge-group 20
> bridge-group 20 subscriber-loop-control
> bridge-group 20 block-unknown-source
> no bridge-group 20 source-learning
> no bridge-group 20 unicast-flooding
> bridge-group 20 spanning-disabled
> !
> interface FastEthernet0
> no ip address
> no ip route-cache
> duplex auto
> speed auto
> no cdp enable
> bridge-group 1
> no bridge-group 1 source-learning
> bridge-group 1 spanning-disabled
> !
> interface FastEthernet0.20
> encapsulation dot1Q 20
> no ip route-cache
> no cdp enable
> bridge-group 20
> no bridge-group 20 source-learning
> bridge-group 20 spanning-disabled
> !
> interface BVI1
> ip address dhcp
> no ip route-cache
> !
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
