antwerp2007
asked on
need quick help with config 2 SSID's aironet 1252 on procurve 2600
need quick help with config 2 SSID's aironet 1252 on procurve 2600
Hello,
I created 2 SSID's on a cisco aironet 1252 (corporate & Guest) in an environment with Windows SBS server and procurve 2650 switch.
DHCP server is the SBS server
Unfortanetely i noticed that 1 need to create VLAN's because of the 2 SSID's.It is a few years ago that i practiced VLANs so i need help.
Procurve config :
VLAN1: STATIC TYPE
vlan 1
name "DEFAULT_VLAN"
untagged 1-33,35-36,41,43-Trk1
ip address 10.1.1.225 255.255.255.0
no untagged 34,37-40
exit
vlan 101
name "Corporate"
untagged 34,37-38
ip helper-address 10.1.1.15 (ip dhcp server vlan1)
tagged 1,41,45
exit
vlan 102
name "Guest"
untagged 39
ip address 192.168.112.250 255.255.255.0 ( i cannot assign an ip from the subnet from VLAN1)
ip helper-address 10.1.1.15 (ip dhcp server vlan1)
tagged 1,40-41,45
exit
spanning-tree
spanning-tree Trk1 priority 4
Cisco Aironet config
ap#sh ru
Building configuration...
Current configuration : 2694 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret
!
no aaa new-model
!
!
!
dot11 ssid Corporate
vlan 101
authentication open
guest-mode
mbssid guest-mode
information-element ssidl
!
dot11 ssid GUEST
vlan 102
authentication open
mbssid guest-mode
information-element ssidl advertisement
!
power inline negotiation prestandard source
!
!
username Cisco password 7 05280F1C2243
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid Corporate
!
ssid GUEST
!
mbssid
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 101
bridge-group 101 subscriber-loop-control
bridge-group 101 block-unknown-source
no bridge-group 101 source-learning
no bridge-group 101 unicast-flooding
bridge-group 101 spanning-disabled
!
interface Dot11Radio0.102
encapsulation dot1Q 102
no ip route-cache
bridge-group 102
bridge-group 102 subscriber-loop-control
bridge-group 102 block-unknown-source
no bridge-group 102 source-learning
no bridge-group 102 unicast-flooding
bridge-group 102 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 101
no bridge-group 101 source-learning
bridge-group 101 spanning-disabled
!
interface GigabitEthernet0.102
encapsulation dot1Q 102
no ip route-cache
bridge-group 102
no bridge-group 102 source-learning
bridge-group 102 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
I believe that i need to set up the following to accomplisch my goal;
2 VLAN's on the AP (for example VLAN1 & VLAN100)
2 VLAN's on the Procurve
1 trunk port on the procurve that i need to physically connect with the cisco AP
routing between the VLAN's (inter valn routing) because i would like to use the SBS server as DHCP server for both VLANs.
DHCP relay on the VLAN's
DOT1Q enabled on the WIFI subinterfaces from the SSID's
Routing to the internet?
and have a few Questions (remarks) also.
A Trunk (cisco) is known as Tagging by HP.
I noticed that i can create a Tagged port but also a Trunk port in a Trunk Group on the procurve 2600.
How do i configure the port from the procurve switch that i connect with the Cisco AP? (Trunk or Tagged port)
The DHCP server is in VLAN1 now and cannot be moved to another VLAN so perhaps i can better assign the coropate SSID to a VLAN1 that i ned to create on the aironet.
I gave the ip routing command on the procurv switch
How to configure the inter vlan routing between them?
Thank you
HP ProCurve Switch 2650# sh trunk
Load Balancing
Port | Name Type | Group Type
---- + -------------------------- ------ --------- + ----- -----
45 | 10/100TX | Trk1 Trunk
HP ProCurve Switch 2650# conf t
HP ProCurve Switch 2650(config)# vlan 102
HP ProCurve Switch 2650(vlan-102)# tagged trk1
HP ProCurve Switch 2650(vlan-102)# exit
HP ProCurve Switch 2650(config)# vlan 101
HP ProCurve Switch 2650(vlan-101)# tagged trk1
HP ProCurve Switch 2650(vlan-101)# exit
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650(config)# vlan 1
HP ProCurve Switch 2650(vlan-1)# tagged trk1
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650# Write mem
HP ProCurve Switch 2650#
Hello,
I created 2 SSID's on a cisco aironet 1252 (corporate & Guest) in an environment with Windows SBS server and procurve 2650 switch.
DHCP server is the SBS server
Unfortanetely i noticed that 1 need to create VLAN's because of the 2 SSID's.It is a few years ago that i practiced VLANs so i need help.
Procurve config :
VLAN1: STATIC TYPE
vlan 1
name "DEFAULT_VLAN"
untagged 1-33,35-36,41,43-Trk1
ip address 10.1.1.225 255.255.255.0
no untagged 34,37-40
exit
vlan 101
name "Corporate"
untagged 34,37-38
ip helper-address 10.1.1.15 (ip dhcp server vlan1)
tagged 1,41,45
exit
vlan 102
name "Guest"
untagged 39
ip address 192.168.112.250 255.255.255.0 ( i cannot assign an ip from the subnet from VLAN1)
ip helper-address 10.1.1.15 (ip dhcp server vlan1)
tagged 1,40-41,45
exit
spanning-tree
spanning-tree Trk1 priority 4
Cisco Aironet config
ap#sh ru
Building configuration...
Current configuration : 2694 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret
!
no aaa new-model
!
!
!
dot11 ssid Corporate
vlan 101
authentication open
guest-mode
mbssid guest-mode
information-element ssidl
!
dot11 ssid GUEST
vlan 102
authentication open
mbssid guest-mode
information-element ssidl advertisement
!
power inline negotiation prestandard source
!
!
username Cisco password 7 05280F1C2243
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid Corporate
!
ssid GUEST
!
mbssid
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 101
bridge-group 101 subscriber-loop-control
bridge-group 101 block-unknown-source
no bridge-group 101 source-learning
no bridge-group 101 unicast-flooding
bridge-group 101 spanning-disabled
!
interface Dot11Radio0.102
encapsulation dot1Q 102
no ip route-cache
bridge-group 102
bridge-group 102 subscriber-loop-control
bridge-group 102 block-unknown-source
no bridge-group 102 source-learning
no bridge-group 102 unicast-flooding
bridge-group 102 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 101
no bridge-group 101 source-learning
bridge-group 101 spanning-disabled
!
interface GigabitEthernet0.102
encapsulation dot1Q 102
no ip route-cache
bridge-group 102
no bridge-group 102 source-learning
bridge-group 102 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
I believe that i need to set up the following to accomplisch my goal;
2 VLAN's on the AP (for example VLAN1 & VLAN100)
2 VLAN's on the Procurve
1 trunk port on the procurve that i need to physically connect with the cisco AP
routing between the VLAN's (inter valn routing) because i would like to use the SBS server as DHCP server for both VLANs.
DHCP relay on the VLAN's
DOT1Q enabled on the WIFI subinterfaces from the SSID's
Routing to the internet?
and have a few Questions (remarks) also.
A Trunk (cisco) is known as Tagging by HP.
I noticed that i can create a Tagged port but also a Trunk port in a Trunk Group on the procurve 2600.
How do i configure the port from the procurve switch that i connect with the Cisco AP? (Trunk or Tagged port)
The DHCP server is in VLAN1 now and cannot be moved to another VLAN so perhaps i can better assign the coropate SSID to a VLAN1 that i ned to create on the aironet.
I gave the ip routing command on the procurv switch
How to configure the inter vlan routing between them?
Thank you
HP ProCurve Switch 2650# sh trunk
Load Balancing
Port | Name Type | Group Type
---- + --------------------------
45 | 10/100TX | Trk1 Trunk
HP ProCurve Switch 2650# conf t
HP ProCurve Switch 2650(config)# vlan 102
HP ProCurve Switch 2650(vlan-102)# tagged trk1
HP ProCurve Switch 2650(vlan-102)# exit
HP ProCurve Switch 2650(config)# vlan 101
HP ProCurve Switch 2650(vlan-101)# tagged trk1
HP ProCurve Switch 2650(vlan-101)# exit
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650(config)# vlan 1
HP ProCurve Switch 2650(vlan-1)# tagged trk1
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650# Write mem
HP ProCurve Switch 2650#
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thank you, meanwhile i figured out that vlan1 untagging is indeed the solution
ASKER