Link to home
Start Free TrialLog in
Avatar of antwerp2007
antwerp2007

asked on

need quick help with config 2 SSID's aironet 1252 on procurve 2600

need quick help with config 2 SSID's aironet 1252 on procurve 2600

Hello,

I created 2 SSID's on a cisco aironet 1252 (corporate & Guest) in an environment with Windows SBS server and procurve 2650 switch.
DHCP server is the SBS server
Unfortanetely i noticed that 1 need to create VLAN's because of the 2 SSID's.It is a few years ago that i practiced VLANs so i need help.

Procurve config :

VLAN1: STATIC TYPE


vlan 1
   name "DEFAULT_VLAN"
   untagged 1-33,35-36,41,43-Trk1
   ip address 10.1.1.225 255.255.255.0
   no untagged 34,37-40
   exit
vlan 101
   name "Corporate"
   untagged 34,37-38
   ip helper-address 10.1.1.15 (ip dhcp server vlan1)
   tagged 1,41,45
   exit
vlan 102
   name "Guest"
   untagged 39
   ip address 192.168.112.250 255.255.255.0 ( i cannot assign an ip from the subnet from VLAN1)
   ip helper-address 10.1.1.15 (ip dhcp server vlan1)
   tagged 1,40-41,45
   exit
spanning-tree
spanning-tree Trk1 priority 4







Cisco Aironet config


ap#sh ru
Building configuration...

Current configuration : 2694 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret
!
no aaa new-model
!
!
!
dot11 ssid Corporate
   vlan 101
   authentication open
   guest-mode
   mbssid guest-mode
   information-element ssidl
!
dot11 ssid GUEST
   vlan 102
   authentication open
   mbssid guest-mode
   information-element ssidl advertisement
!
power inline negotiation prestandard source
!
!
username Cisco password 7 05280F1C2243
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 ssid Corporate
 !
 ssid GUEST
 !
 mbssid
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.101
 encapsulation dot1Q 101
 no ip route-cache
 bridge-group 101
 bridge-group 101 subscriber-loop-control
 bridge-group 101 block-unknown-source
 no bridge-group 101 source-learning
 no bridge-group 101 unicast-flooding
 bridge-group 101 spanning-disabled
!
interface Dot11Radio0.102
 encapsulation dot1Q 102
 no ip route-cache
 bridge-group 102
 bridge-group 102 subscriber-loop-control
 bridge-group 102 block-unknown-source
 no bridge-group 102 source-learning
 no bridge-group 102 unicast-flooding
 bridge-group 102 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 no dfs band block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface GigabitEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.101
 encapsulation dot1Q 101
 no ip route-cache
 bridge-group 101
 no bridge-group 101 source-learning
 bridge-group 101 spanning-disabled
!
interface GigabitEthernet0.102
 encapsulation dot1Q 102
 no ip route-cache
 bridge-group 102
 no bridge-group 102 source-learning
 bridge-group 102 spanning-disabled
!
interface BVI1
 ip address dhcp client-id GigabitEthernet0
 no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
!
end


I believe that i need to set up the following to accomplisch my goal;

2 VLAN's on the AP (for example VLAN1 & VLAN100)
2 VLAN's on the Procurve
1 trunk port on the procurve that i need to physically connect with the cisco AP
routing between the VLAN's (inter valn routing) because i would like to use the SBS server as DHCP server for both VLANs.
DHCP relay on the VLAN's
DOT1Q enabled on the WIFI subinterfaces from the SSID's
Routing to the internet?







and have a few Questions (remarks) also.

A Trunk (cisco) is known as Tagging by HP.
I noticed that i can create a Tagged port but also a Trunk port in a Trunk Group on the procurve 2600.
How do i configure the port from the procurve switch that i connect with the Cisco AP? (Trunk or Tagged port)
The DHCP server is in VLAN1 now and cannot be moved to another VLAN so perhaps i can better assign the coropate SSID to a VLAN1 that i ned to create on the aironet.
I gave the ip routing command on the procurv switch
How to configure the inter vlan routing between them?


Thank you



HP ProCurve Switch 2650# sh trunk

 Load Balancing

  Port | Name                             Type      | Group Type
  ---- + -------------------------------- --------- + ----- -----
  45   |                                  10/100TX  | Trk1  Trunk


HP ProCurve Switch 2650# conf t
HP ProCurve Switch 2650(config)# vlan 102
HP ProCurve Switch 2650(vlan-102)# tagged trk1
HP ProCurve Switch 2650(vlan-102)# exit
HP ProCurve Switch 2650(config)# vlan 101
HP ProCurve Switch 2650(vlan-101)# tagged trk1
HP ProCurve Switch 2650(vlan-101)# exit
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650(config)# vlan 1
HP ProCurve Switch 2650(vlan-1)# tagged trk1
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650# Write mem
HP ProCurve Switch 2650#
Avatar of antwerp2007
antwerp2007

ASKER

The only problem is still have is to route the guest ssid (vlan2) to the default gateway of my native vlan 1
ASKER CERTIFIED SOLUTION
Avatar of Craig Beck
Craig Beck
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thank you, meanwhile i figured out that vlan1 untagging is indeed the solution