[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.1

Problem with cisco 871 wireless on SMC 2554 AP's

Asked by ibtaya in Wireless Network Access Points, Network Routers

On my cisco 841w I am offering 2 ssids.  Vlan1 is my Open ssid and dhcp is terminated on the cisco device.  Staff is Vlan10 and dhcp is offered from my internal network.  I have all my SMC 2552 and SMC 2554's plugged into the same switch in the network room and going into port Fa2 on the cisco 871.  Where the SMC's are located they are plugged into little 5 port switches that local computers are also using to get to the network.  My assumption is that since they are both needing vlan 10 this should work but in fact the local computers are not able to get to the network whereas the wireless users on the staff ssid are able to get to the network.  
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
SVBCEdge#
SVBCEdge#show run
Building configuration...
 
Current configuration : 6061 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SVBCEdge
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxx
enable password 7 xxxx
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
aaa session-id common
!
crypto pki trustpoint TP-self-signed-xxxx
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-xxxx
 revocation-check none
 rsakeypair TP-self-signed-xxxx
!
!
crypto pki certificate chain TP-self-signed-xxxx
 certificate self-signed 01
  Certwashere
 
        quit
dot11 syslog
!
dot11 ssid Open
   vlan 1
   authentication open
   mbssid guest-mode
!
dot11 ssid Staff
   vlan 10
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 xxxxx
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1 192.168.2.99
!
ip dhcp pool VLAN1
   import all
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server xxxxx
   lease 4
!
!
ip inspect name MYFW tcp
ip inspect name MYFW udp
no ip domain lookup
ip domain name severns.local
!
!
!
username admin privilege 15 password 7 xxxx
!
!
archive
 log config
  hidekeys
!
!
ip ssh rsa keypair-name xxxxxx
!
bridge irb
!
!
interface FastEthernet0
 switchport access vlan 10
!
interface FastEthernet1
 switchport trunk native vlan 10
 switchport mode trunk
!
interface FastEthernet2
 switchport access vlan 10
 switchport mode trunk
!
interface FastEthernet3
 switchport mode trunk
 shutdown
!
interface FastEthernet4
 ip address 0.0.0.0 255.255.255.128
 ip access-group Internet-inbound-ACL in
 no ip proxy-arp
 ip inspect MYFW out
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 no cdp enable
!
interface Dot11Radio0
 no ip address
 no dot11 extension aironet
 !
 encryption vlan 10 mode ciphers tkip
 !
 ssid Open
 !
 ssid Staff
 !
 mbssid
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
 54.0
 channel 2412
 station-role root
 no cdp enable
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 arp authorized
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 bridge-group 10
 bridge-group 10 subscriber-loop-control
 bridge-group 10 spanning-disabled
 bridge-group 10 block-unknown-source
 no bridge-group 10 source-learning
 no bridge-group 10 unicast-flooding
!
interface Vlan1
 description Guest Network
 ip dhcp client hostname VLAN1
 no ip address
 ip nat inside
 ip virtual-reassembly
 bridge-group 1
 bridge-group 1 spanning-disabled
!
interface Vlan10
 description Internal Network
 no ip address
 ip nat inside
 ip virtual-reassembly
 bridge-group 10
 bridge-group 10 spanning-disabled
!
interface BVI10
 description Bridge to Internal Network
 ip address 10.1.10.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface BVI1
 description Bridge to Guest Network
 ip address 192.168.2.1 255.255.255.0
 ip access-group Guest-ACL in
 ip nat inside
 ip virtual-reassembly
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 12.10.49.129
ip route 0.0.0.0 0.0.0.0 173.14.100.22
!
ip http server
ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source static tcp 10.1.10.10 25 0.0.0.0 25 extendable
ip nat inside source static tcp 10.1.10.10 443 0.0.0.0 443 extendable
ip nat inside source static tcp 10.1.10.10 3389 0.0.0.0 3389 extendable
ip nat inside source static tcp 10.1.10.15 5900 0.0.0.0 5900 extendable
!
ip access-list extended Guest-ACL
 deny   ip any 10.1.10.0 0.0.0.255
 permit ip any any
 permit tcp any any eq ftp
ip access-list extended Internet-inbound-ACL
 permit udp any eq bootps any eq bootpc
 permit icmp any any echo
 permit icmp any any echo-reply
 permit icmp any any traceroute
 permit gre any any
 permit esp any any
 permit tcp any any eq smtp
 permit tcp any any eq 443
 permit tcp any any eq 3389
 permit tcp any any eq 5900
!
access-list 1 permit 10.1.10.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
bridge 10 protocol ieee
bridge 10 route ip
!
line con 0
 password 7 xxxx
 no modem enable
line aux 0
line vty 0 4
 password 7 xxxx
 transport preferred ssh
!
scheduler max-task-time 5000
end
 
SVBCEdge#
 
Related Solutions
Keywords: Problem with cisco 871 wireless on …
 
Loading Advertisement...
 
[+][-]08/31/09 07:05 AM, ID: 25222864Accepted Solution

View this solution now by starting your 30-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

About this solution

Zones: Wireless Network Access Points, Network Routers
Sign Up Now!
Solution Provided By: CanalIns
Participating Experts: 1
Solution Grade: A
 
[+][-]08/31/09 07:06 AM, ID: 25222877Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]08/31/09 07:09 AM, ID: 25222898Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/31/09 07:11 AM, ID: 25222909Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]08/31/09 07:17 AM, ID: 25222967Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20091021-EE-VQP-81 - Hierarchy / EE_QW_3_20080625