?
Solved

need quick help with config 2 SSID's aironet 1252 on procurve 2600

Posted on 2011-10-13
3
Medium Priority
?
1,637 Views
Last Modified: 2012-05-12
need quick help with config 2 SSID's aironet 1252 on procurve 2600

Hello,

I created 2 SSID's on a cisco aironet 1252 (corporate & Guest) in an environment with Windows SBS server and procurve 2650 switch.
DHCP server is the SBS server
Unfortanetely i noticed that 1 need to create VLAN's because of the 2 SSID's.It is a few years ago that i practiced VLANs so i need help.

Procurve config :

VLAN1: STATIC TYPE


vlan 1
   name "DEFAULT_VLAN"
   untagged 1-33,35-36,41,43-Trk1
   ip address 10.1.1.225 255.255.255.0
   no untagged 34,37-40
   exit
vlan 101
   name "Corporate"
   untagged 34,37-38
   ip helper-address 10.1.1.15 (ip dhcp server vlan1)
   tagged 1,41,45
   exit
vlan 102
   name "Guest"
   untagged 39
   ip address 192.168.112.250 255.255.255.0 ( i cannot assign an ip from the subnet from VLAN1)
   ip helper-address 10.1.1.15 (ip dhcp server vlan1)
   tagged 1,40-41,45
   exit
spanning-tree
spanning-tree Trk1 priority 4







Cisco Aironet config


ap#sh ru
Building configuration...

Current configuration : 2694 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret
!
no aaa new-model
!
!
!
dot11 ssid Corporate
   vlan 101
   authentication open
   guest-mode
   mbssid guest-mode
   information-element ssidl
!
dot11 ssid GUEST
   vlan 102
   authentication open
   mbssid guest-mode
   information-element ssidl advertisement
!
power inline negotiation prestandard source
!
!
username Cisco password 7 05280F1C2243
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 ssid Corporate
 !
 ssid GUEST
 !
 mbssid
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.101
 encapsulation dot1Q 101
 no ip route-cache
 bridge-group 101
 bridge-group 101 subscriber-loop-control
 bridge-group 101 block-unknown-source
 no bridge-group 101 source-learning
 no bridge-group 101 unicast-flooding
 bridge-group 101 spanning-disabled
!
interface Dot11Radio0.102
 encapsulation dot1Q 102
 no ip route-cache
 bridge-group 102
 bridge-group 102 subscriber-loop-control
 bridge-group 102 block-unknown-source
 no bridge-group 102 source-learning
 no bridge-group 102 unicast-flooding
 bridge-group 102 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 no dfs band block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface GigabitEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.101
 encapsulation dot1Q 101
 no ip route-cache
 bridge-group 101
 no bridge-group 101 source-learning
 bridge-group 101 spanning-disabled
!
interface GigabitEthernet0.102
 encapsulation dot1Q 102
 no ip route-cache
 bridge-group 102
 no bridge-group 102 source-learning
 bridge-group 102 spanning-disabled
!
interface BVI1
 ip address dhcp client-id GigabitEthernet0
 no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
!
end


I believe that i need to set up the following to accomplisch my goal;

2 VLAN's on the AP (for example VLAN1 & VLAN100)
2 VLAN's on the Procurve
1 trunk port on the procurve that i need to physically connect with the cisco AP
routing between the VLAN's (inter valn routing) because i would like to use the SBS server as DHCP server for both VLANs.
DHCP relay on the VLAN's
DOT1Q enabled on the WIFI subinterfaces from the SSID's
Routing to the internet?







and have a few Questions (remarks) also.

A Trunk (cisco) is known as Tagging by HP.
I noticed that i can create a Tagged port but also a Trunk port in a Trunk Group on the procurve 2600.
How do i configure the port from the procurve switch that i connect with the Cisco AP? (Trunk or Tagged port)
The DHCP server is in VLAN1 now and cannot be moved to another VLAN so perhaps i can better assign the coropate SSID to a VLAN1 that i ned to create on the aironet.
I gave the ip routing command on the procurv switch
How to configure the inter vlan routing between them?


Thank you



HP ProCurve Switch 2650# sh trunk

 Load Balancing

  Port | Name                             Type      | Group Type
  ---- + -------------------------------- --------- + ----- -----
  45   |                                  10/100TX  | Trk1  Trunk


HP ProCurve Switch 2650# conf t
HP ProCurve Switch 2650(config)# vlan 102
HP ProCurve Switch 2650(vlan-102)# tagged trk1
HP ProCurve Switch 2650(vlan-102)# exit
HP ProCurve Switch 2650(config)# vlan 101
HP ProCurve Switch 2650(vlan-101)# tagged trk1
HP ProCurve Switch 2650(vlan-101)# exit
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650(config)# vlan 1
HP ProCurve Switch 2650(vlan-1)# tagged trk1
HP ProCurve Switch 2650(config)# exit
HP ProCurve Switch 2650# Write mem
HP ProCurve Switch 2650#
0
Comment
Question by:antwerp2007
  • 2
3 Comments
 
LVL 1

Author Comment

by:antwerp2007
ID: 36966850
The only problem is still have is to route the guest ssid (vlan2) to the default gateway of my native vlan 1
0
 
LVL 47

Accepted Solution

by:
Craig Beck earned 2000 total points
ID: 36982798
Based on the config you've provided you don't need a trunked port (in HP speak), just a tagged port.

If you connect the AP to port 1 on the switch you would do this...

conf t
vlan 1
 untagged 1
vlan 101
 tagged 1
vlan 102
 tagged 1


The config means that the AP sends untagged traffic on VLAN 1 (as per the native command on the AP).  Traffic on VLANs 101 and 102 is tagged by the AP so should be tagged on the switch.
0
 
LVL 1

Author Comment

by:antwerp2007
ID: 36998471
thank you, meanwhile i figured out that vlan1 untagging is indeed the solution
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

755 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question