We help IT Professionals succeed at work.

Point to Multipoint Bridge Cisco 1532i

DaveKall42
DaveKall42 asked
on
I am going to be implementing a point to multipoint bridge with 1 root and 2 non root bridges that are Cisco 1532i waps in autonomous mode.  I have default vlan and vlan 10. Could someone look over these configs and see if I have set them up correctly?
wap-1532-rootbridgecfg.docx
wap-1532-nonrootbridgecfg.docx
Comment
Watch Question

Top Expert 2014
Commented:
They're not quite right.

1] You haven't attached the acoma SSID to VLAN10.  If you don't attach ALL SSIDs to a VLAN ID those SSIDs with no VLAN ID won't work.

2] The bridging SSID is wide-open.  If that's your P2P SSID you want to secure that or all traffic passing between the two 1532s will be unencrypted.

3] You've configured the guest-mode parameter on the acoma SSID at the non-root bridge, but not at the root.  That will broadcast the SSID from the non-root AP but not the root AP.  However, putting the AP in bridge mode won't allow clients to connect.  If the APs are purely for bridging this is OK.

4] You've not enabled some of the bridge options for each subinterface.  This isn't essential but may cause issues depending on what you have at each end of the link.

Author

Commented:
Basically these WAPs will not be having clients connect.  They will be strictly for P2P bridging.  So in that case do I not even need the acoma ssid?  I wasn't sure about that.  I do want to encrypt the data across the P2P ssid.

Author

Commented:
Also what bridge options do I need to enable on the sub interfaces?
Top Expert 2014

Commented:
You only need one SSID for the link then.

Bridge options are:

bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding

Open in new window


Change the number to suit each bridge group.

Author

Commented:
So then I just configure the encryption on the ssid bridging and remove the ssid acoma and then apply the bridging ssid to the dot11 0?
Top Expert 2014

Commented:
Yep

Author

Commented:
So I should have those 4 items applied to bridge group 1 and bridge group 10?

Thanks for your great help on this!
Top Expert 2014

Commented:
Technically, yes they need to be there but saying that, the AP should enter them automatically.  If you put the config you have now on the APs you might find that they're already there when you do a show run.

Author

Commented:
Also one other question.  When I apply vlan 1 to ssid bridging it will only let me do vlan 1 or vlan 10.  Does that mean that VLAN 10 won't work with that ssid in bridging mode?
Top Expert 2014

Commented:
You apply the VLAN to the bridging SSID so that you can pass management traffic to/from the bridges.  If you attached VLAN10 to the SSID you'd have to put an IP address from VLAN10 on each AP in order to manage it.

When you configure multiple VLANs on the APs you don't have to attach them to SSIDs - this is how you trunk VLANs in a bridge configuration.

Author

Commented:
Gotcha.  So the VLAN info is passed through the trunking with the virtual interfaces on the Gig E and dot11 0 Radio as well as the trunk ports settings on the switches.
Top Expert 2014

Commented:
Exactly right!

Author

Commented:
Great! Thanks again for all your help!

Author

Commented:
Excellent Advice!
Top Expert 2014

Commented:
My pleasure :-)