• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2489
  • Last Modified:

CISCO Aironet 1140 cannot change the management IP to be on another VLAN (Sub-Interface)

Cisco IOS Software, C1140 Software (C1140-K9W7-M), Version 12.4(21a)JA1, RELEASE SOFTWARE (fc1)

I'm trying to add a VLAN and move the mgmt IP on that VLAN.
I don't need a Wireless SSID or access to that VLAN.
The vlan is already member of the AP - switch port.
The vlan is already member of the Aggregated Fiber Link that connects the switches to the CORE switch and it's working good.

The procedure i made was successfull on two of the fourteen APs.

Attached is the anonimized actual configuration.
Here are the commands i'm trying to launch:
interface GigabitEthernet0.100
 encapsulation dot1Q 100
 no ip route-cache
 bridge-group 100
 no bridge-group 100 source-learning
 bridge-group 100 spanning-disabled
 ip address 172.17.xxx.183 255.255.255.0
!
ip default-gateway 172.17.xxx.252
interface BVI 1
ip address 172.17.xxx.183 255.255.255.0
exit
interface dot11Radio 0.2
 no ip address
exit

XXXXX HERE COMES THE FUN PART XXXXXXXX

interface gigabitEthernet 0.2
 no ip address
 !

Open in new window


Well, before removing the old IP from the 0.2 sub-if, i'm able to manage the AP FROM THE NEW IP, as well as with the old IP.

After removing that IP, it loses mgmt connectivity forever: i'm no more able to manage it from the old nor the new IP.


Help....
 Cfg-AP3-2011-10-17-ANONIMIZZATA.txt
0
ienaxxx
Asked:
ienaxxx
  • 5
  • 2
1 Solution
 
joelsplaceCommented:
If it works on some and not others I would check for a firmware update from Cisco.
0
 
ienaxxxAuthor Commented:
Hi Joel,
all the APs have the very same version.
0
 
ienaxxxAuthor Commented:
Noone?
0
The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

 
Craig BeckCommented:
The management IP address should ALWAYS be configured on the BVI1 interface, and is designated by specifying the NATIVE VLAN.  If you want to manage the AP on VLAN 100 you should set that VLAN to be the native VLAN on the AP.

Just a tip to make things easier too; don't configure VLANs and sub-interfaces via the CLI - use the web GUI.  Of course you can make the changes via the CLI but it tends to cause the AP to complain about other configured items.
0
 
ienaxxxAuthor Commented:
i have no native vlan 'cause the switch port is in trunk mode.

The actual mgmt IP is NOT on the native VLAN, but on vlan id 2.
I simply want to change this to vlan 100.

Thanks anyway.
0
 
Craig BeckCommented:
You MUST set one port as untagged on the trunk port.  If you haven't specified an untagged (native) port it will be VLAN1, so you must put the management IP of the AP on VLAN1.

On an Aironet AP, the management IP MUST be on the native VLAN, so if you want to change it to VLAN100 you need to set the native VLAN to VLAN100 on the switchport.

You should always use the BVI1 interface when assigning the IP address on the AP, and not the GigabitEthernet interface.
0
 
ienaxxxAuthor Commented:
OK, i'll give it a try.
Thanks.
0
 
ienaxxxAuthor Commented:
thanks to all for your help.
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now