lawre1108
asked on
Cisco ACCESS POINT not picking up IP address
Hi guys,
Please help, since I configured this AP, it has never pick up an ip address from the client, I can only see the MAC address/hostname as shown in the attached PDF, even with a host connected, the host cannot access internet or network drives.
And also attached is the event log of the AP.
Please advice what you think may be wrong with my configuration.
Thanks for the anticipated response.
Below is the AP config
-------------------------- ---------- ----------
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname PLWSW02COMCW01
!
enable secret
!
aaa new-model
!
!
aaa group server radius rad_eap
server 172.25.1.179 auth-port 1645 acct-port 1646
server 172.25.1.181 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local group tac_admin group rad_admin
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods group rad_mac
aaa authorization exec default local group tac_admin group rad_admin
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
led display alternate
!
!
!
dot11 ssid guest
vlan 3
authentication open
!
dot11 ssid unwired05
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
!
dot11 network-map
power inline negotiation prestandard source
!
!
username Cisco password
username admin privilege 15 password
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption key 1 size 128bit 7 A4271B5BC35CBB830C93DC97CC 1F
encryption key 2 size 128bit 7 8ABA0121A3DC9DB7944089D2E1 46 transmit-key
encryption key 3 size 128bit 7 0EDED39ED6DC906E12BC4BC4E2 6F
encryption key 4 size 128bit 7 F65A54E492DD5F767955E5076C C3
encryption mode wep mandatory mic key-hash
!
encryption vlan 1 mode wep mandatory
!
encryption vlan 3 key 1 size 40bit 7 74AC81D1D7D4 transmit-key
encryption vlan 3 mode wep mandatory
!
ssid guest
!
ssid unwired05
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0
packet retries 128 drop-packet
channel 2462
station-role root
rts threshold 2312
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption key 1 size 128bit 7 A4271B5BC35CBB830C93DC97CC 1F transmit-key
encryption key 2 size 128bit 7 8ABA0121A3DC9DB7944089D2E1 46
encryption key 3 size 128bit 7 0EDED39ED6DC906E12BC4BC4E2 6F
encryption key 4 size 128bit 7 F65A54E492DD5F767955E5076C C3
encryption mode wep mandatory mic key-hash
!
ssid unwired05
!
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
speed 100
full-duplex
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface BVI1
ip address 172.25.175.135 255.255.255.128
no ip route-cache
!
interface BVI3
no ip address
no ip route-cache
!
ip default-gateway 172.25.175.129
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cis31F4A594C
no cdp advertise-v2
radius-server host 172.25.1.179 auth-port 1645 acct-port 1646 key 7 1527051B453878207866
radius-server host 172.25.1.181 auth-port 1645 acct-port 1646 key 7 02330A4C4A145C251C1B
radius-server deadtime 10
radius-server vsa send accounting
bridge 1 protocol ieee
bridge 1 route ip
bridge 3 protocol ieee
!
!
!
line con 0
line vty 5 15
!
sntp server 172.25.1.1
end
ap-home.pdf
Please help, since I configured this AP, it has never pick up an ip address from the client, I can only see the MAC address/hostname as shown in the attached PDF, even with a host connected, the host cannot access internet or network drives.
And also attached is the event log of the AP.
Please advice what you think may be wrong with my configuration.
Thanks for the anticipated response.
Below is the AP config
--------------------------
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname PLWSW02COMCW01
!
enable secret
!
aaa new-model
!
!
aaa group server radius rad_eap
server 172.25.1.179 auth-port 1645 acct-port 1646
server 172.25.1.181 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local group tac_admin group rad_admin
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods group rad_mac
aaa authorization exec default local group tac_admin group rad_admin
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
led display alternate
!
!
!
dot11 ssid guest
vlan 3
authentication open
!
dot11 ssid unwired05
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
!
dot11 network-map
power inline negotiation prestandard source
!
!
username Cisco password
username admin privilege 15 password
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption key 1 size 128bit 7 A4271B5BC35CBB830C93DC97CC
encryption key 2 size 128bit 7 8ABA0121A3DC9DB7944089D2E1
encryption key 3 size 128bit 7 0EDED39ED6DC906E12BC4BC4E2
encryption key 4 size 128bit 7 F65A54E492DD5F767955E5076C
encryption mode wep mandatory mic key-hash
!
encryption vlan 1 mode wep mandatory
!
encryption vlan 3 key 1 size 40bit 7 74AC81D1D7D4 transmit-key
encryption vlan 3 mode wep mandatory
!
ssid guest
!
ssid unwired05
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0
packet retries 128 drop-packet
channel 2462
station-role root
rts threshold 2312
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption key 1 size 128bit 7 A4271B5BC35CBB830C93DC97CC
encryption key 2 size 128bit 7 8ABA0121A3DC9DB7944089D2E1
encryption key 3 size 128bit 7 0EDED39ED6DC906E12BC4BC4E2
encryption key 4 size 128bit 7 F65A54E492DD5F767955E5076C
encryption mode wep mandatory mic key-hash
!
ssid unwired05
!
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
speed 100
full-duplex
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface BVI1
ip address 172.25.175.135 255.255.255.128
no ip route-cache
!
interface BVI3
no ip address
no ip route-cache
!
ip default-gateway 172.25.175.129
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cis31F4A594C
no cdp advertise-v2
radius-server host 172.25.1.179 auth-port 1645 acct-port 1646 key 7 1527051B453878207866
radius-server host 172.25.1.181 auth-port 1645 acct-port 1646 key 7 02330A4C4A145C251C1B
radius-server deadtime 10
radius-server vsa send accounting
bridge 1 protocol ieee
bridge 1 route ip
bridge 3 protocol ieee
!
!
!
line con 0
line vty 5 15
!
sntp server 172.25.1.1
end
ap-home.pdf
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
who is providing DHCP for wirless user?
ASKER
Thanks bsohn417, i have a server on site that provide dhcp for both wired/wireless, at the moment everyone on site can access the network via wired and working perfectly.
Thanks again
Thanks again
is the AP on a different subnet or vlan to the dhcp server ?
If so you will need an IP helper putting in to route the DHCP traffic.
If you put a static IP address into the AP does everything work as it should ?
(trying to eliminate a routing issue as opposed to a DHCP issue)
ArronG
If so you will need an IP helper putting in to route the DHCP traffic.
If you put a static IP address into the AP does everything work as it should ?
(trying to eliminate a routing issue as opposed to a DHCP issue)
ArronG
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Ip helper address is definitely needed on default gateway interface configuration
ASKER
Solution/s not conclusive
ASKER
After the changes you suggested, nothing seems to change as shown in the attached..
Regard
ap-home2.pdf