Solved

Reconfig of Cisco AP to no vlans

Posted on 2008-06-26
5
694 Views
Last Modified: 2013-11-12
Hi Experts,

I initially set up my cisco wireless ap on a network where I have several vlans, the config works great.  I have been asked to ship one of my ap to another site where they do not have vlans and I wanted to make sure my config would work once shipped.  I am including the important part of this config change.  I understand the ip address and pretty normal stuff will change and I have that under control its this part of the config I want to make sure is ok.  

This is my initial config:

dot11 ssid <ssid>
   vlan 90
   authentication open eap eap_methods
   authentication key-management wpa
!

interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 90 mode ciphers tkip
 !
 encryption vlan 75 mode ciphers aes-ccm tkip
 !
 ssid <ssid>
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.75
 encapsulation dot1Q 75
 no ip route-cache
!
interface Dot11Radio0.90
 encapsulation dot1Q 90
 no ip route-cache
 bridge-group 90
 bridge-group 90 subscriber-loop-control
 bridge-group 90 block-unknown-source
 no bridge-group 90 source-learning
 no bridge-group 90 unicast-flooding
 bridge-group 90 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.1
 encapsulation dot1Q 1
 no ip route-cache
!
interface FastEthernet0.40
 encapsulation dot1Q 40 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.90
 encapsulation dot1Q 90
 no ip route-cache
 bridge-group 90
 no bridge-group 90 source-learning
 bridge-group 90 spanning-disabled


This is my reconfigured AP with no vlans:

dot11 ssid <ssid>
   vlan 1
   authentication open eap eap_methods
   authentication key-management wpa
!

interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 1 mode ciphers tkip
 !
 ssid <ssid>
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
  no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.1
 no ip route-cache
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled

Also, since I am not using vlans, can this be put on a normal switchport and not a trunk port?

Thanks,

R
0
Comment
Question by:rhltechie28
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 10

Expert Comment

by:Sorenson
ID: 21875081
Get rid of the subintefaces (.1).. That will still assume you have vlan 1 configured on a switch, and that the AP is connected to a dot1q trunk port.

change it to look like:
==snip===
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 no shut
 !
 ssid xxxxxxx
 !
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
!
interface FastEthernet0
 no ip address
 no ip route-cache
 no shut
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
 hold-queue 160 in
!
!
interface BVI1
 ip address x.x.x.x  x.x.x.x
 no ip route-cache
 no shut
!
==snip===

then you will be able to hang it from a regular switch port (non trunked).

0
 

Author Comment

by:rhltechie28
ID: 21875108
Ah, gotcha.  So the config I sent along would work if I have an ip address on vlan 1 of my switch correct?  I believe I do.  I apologize when I said no vlans, that was obviously the wrong wording.
0
 
LVL 10

Accepted Solution

by:
Sorenson earned 250 total points
ID: 21875304
sure.  if the switch port was a dot1q trunk, and the switch had vlan 1 defined (by default it is there).  it would have been good.  
if you were putting it in a switch that didn't do trunking, or have vlans (for example an unmanged switch), then you would need to remove the sub interfaces.
0
 

Author Comment

by:rhltechie28
ID: 21875375
Thank you for your help.
0
 
LVL 10

Expert Comment

by:Sorenson
ID: 21875394
np -
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
For Sennheiser, comfort, quality and security are high priority areas. This paper addresses the security of Bluetooth technology and the supplementary security that Sennheiser’s Contact Center and Office (CC&O) headsets provide.  
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question