1310 bridge - transparent to local WEP'ed traffic?

we have a 1310 connecting two buildings networks.
inside each building we have a wireless network (Intermec access points).
we are implementing WEP on the Intermec AP's.
will the cisco 1310 allow the wep traffic without interference?
or would i need to modify the 1310 somehow?

You're not understanding how things work.
WEP is happening between your client and the AP where they are associated. As soon as the AP sends the traffic over the network, it's normal wired traffic. No WEP.
So the 1310 will receive traffic and forward it to the other building without problem.
You can also configure wep on the 2 bridges, so they would re-encrypt the packets over the air. Wireless encryption is direclty point-to-point, not end-to-end.
By the way, why are you still using wep ? Are you sure WPA wouldn't be better ? :-)

Similar Messages

Configuration of a Point to MultiPoint link with Cisco Aironet 1310 bridges

Hi All,
The previous problem of which I started another conversation here:
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddba023
somehow dissapeared. It could have been a problem of interferences.
I have another issue with other (multipoint) wireless WAN link, which I hope has a solution.
On the central node, we have an Cisco Aironet 1310 bridge configured as root-bridge. It has a panel of four vertical polarity 17 dBi panel 90? antennas, with more than enough gain (there is a 250 mWatts 802.11 b/g amplifier, before the 4-way splitter) and excellent line of sight to three remote bridges.
The three (03) remote bridges are also Aironet 1310 models, confidured as non-root-bridges.
The problem we have is that it seems that when the three remote links operate concurrently the amount of lost packets is huge. When I shutdown the radio interfaces of two bridges, the remaining bridge makes an excellent link with the central node.
It seems that some hours are more critical than others, also the links operate much worse when there is some (small) network traffic in them.
I have read the 1310 manuals, and I can't find a sample configuration for point to multi-point links.
Does someone knows what radio interface configuration should I need to use to establish better quality communication?
I mean, perhaps the 1 x root - 3 x no root configuration is not recommendable for the multipoint link configuration.
Any hints will be welcome.
Best Regards,
Igor Sotelo.

Hi All,
Thank you for the information. I configured the distance on the root bridges, but the links showed instability.
I'm using a bi-directional amplifier. It has two pieces. According to the manuals, one is installed indoors, the other outdoors. I'm not sure if the indoors piece has the transmition module or it's only the injector.
We could establish connection at 7 km (around 4 milles) distance from the central point, using 24 dBi antennas on the other side.
However, we have issues with a near located point that is only 1.2 Km (around 0.8 milles) away and has a 13 dBi integrated patch antenna. The signal strenght value we get there is in the -62 to -68 dBm range, and is noticiably (5-10 dBm) lower than the strenght we get at other points of the link. And I have trouble establishing a high quality link with that point, using OFDM modulation. I tend to think that if I remove the amplifier I'm not going to reach that point at all. The EIRP on the central iste is 34 dBm / 2.5 watts, without amplifier it would be 26 dBm / 0.4 watts.
On the opposite sites the EIRP is 33 dBm / 2 watts using CCK or 28 dBm / 0.63 watts using OFDM.
When one looks at the central site from that point, an Motorola Canopy with passive reflector (EIRP 48 dBm or around 64 watts) can be seen. It doesn't have the same direction, but the opposite site must be large distance and could interfere with my wireless network. Attached is an amplified photo of the view. It's safe to assume that the Canopy operates in the 2.4 GHz frequency range.
Once I connect the point at 1.2 Km, the multipoint link loses its quality, and soon the lost packets get too frequent.
The CCK seems to be much more interfered than OFDM, I guess because of that canopies.
Another thing I'm wondering about is if the Aironet 1310 can continuosly switch CCK-OFDM over the same point - multipoint link, without losing packets.
What other parameters should I tweak? Is there a way to avoid interferences fromt the canopy?
I would like to apply 100 mWatts local power using the radio with OFDM, but it seems that's not possible.
Best Regards,
Igor Sotelo.

Lower than expected 1310 bridge performance

Hi All,
We have recently installed an wireless WAN link over 7 km (aproximate 4.5 milles) distance. The towers are sufficent for fresnel and earth bulge and obstacles requirements.
We have used Cisco Aironet 1310 bridges (one configured as root bridge, the other as non-root bridge). The antennas are 24 dBi from Hyperlink, connected by RP-TNC to N pigtails, also provided by Hyperlink. According the Cisco utilities, the antennas has more than enough gain for the distance, climatic and topographic conditions.
The alignement of the antennas was made visually (using binoculars) on one side, on the other with precision instruments.
To select the frequency (the automatic selection works awfuly bad, it establish connection one of three times) we use the Carrier Busy Test on the network interface / Radio 802.11G menu, where we are able to pick the frequency with zero percent (0%) utilization most of the time.
The problems we experiment are the following:
- The latency times are very variable. From 1 ms, to 207 ms, to other values. We have used other wireless equipment with more stable performance.
- There are lost packets frequently, even with the slightest network traffic (2 PC's with terminal service sessions). Supousedly, the link is of 54 Mbps speed, but the quality is very low.
- At the moment, we are losing connection every couple of minutes. After that the non-root configured bridge stays down and the only way to reestablish connection is by reseting the 1310.
- I see that the speed changes every time I refresh the IE utility.
I still havent configured any security, because the awful way the link works.
What could be the reason for such bad performance?
Best Regards,
Igor Sotelo.

Hi All,
I have noticed that when the switches have VLAN configured, the latency is very variable. In this particular case, the switches does not have this configuration. I haven't configured VLAN's on the wireless bridges either.
I will test the link without any switches, it's an good idea. Perhaps there is "something" with the wired network.
Other than that the specifics are:
- I have used Belden RG-6 1530A cable that has even higher grade than the Belden 9077 recommended by the manuals.
- The extension of the cables is around 40 meters (120 foot).
- We have installed another wireless link in the place, that uses the same frequency, but different polarity. Also we try to separate the channels at least 7 frequencies.
- The other system is omnidireccional in nature, and it doesn't have excessive gain.
- On the place where the equipment of both systems coexist, the physical separation between the antennas of the two systems is around 9 foots (3 meters).
The error messages we get are:
- On the root bridge:
Mar 1 00:00:57.238 Information Interface Dot11Radio0, Deauthenticating Station 0017.0ec6.a590 Reason: Previous authentication no longer valid
Mar 1 00:00:57.237 Warning Packet to client 0017.0ec6.a590 reached max retries, removing the client
- On the non-root bridge:
Mar 1 16:19:52.072 Notification Line protocol on Interface Dot11Radio0, changed state to up
Mar 1 16:19:51.072 Error Interface Dot11Radio0, changed state to up
Mar 1 16:19:51.071 Warning Interface Dot11Radio0, Associated To AP Central-2 0017.0ec6.a580 [None]
Mar 1 16:16:00.255 Warning Interface Dot11Radio0, cannot associate: No Response
Mar 1 16:15:50.397 Notification Line protocol on Interface Dot11Radio0, changed state to down
Mar 1 16:15:49.398 Error Interface Dot11Radio0, changed state to down
Mar 1 16:15:49.397 Warning Interface Dot11Radio0, parent lost: Too many retries
Mar 1 16:14:56.788 Notification Line protocol on Interface Dot11Radio0, changed state to up
Mar 1 16:14:55.788 Error Interface Dot11Radio0, changed state to up
Mar 1 16:14:55.788 Warning Interface Dot11Radio0, Associated To AP Central-2 0017.0ec6.a580 [None]
When we make a reload on any of the bridges the link reestablishes for some time. With this message on the root bridge:
Mar 1 00:00:44.194 Information Interface Dot11Radio0, Station NONROOTNAME 0017.0ec6.a590 Reassociated KEY_MGMT[NONE]
Mar 1 00:00:35.456 Notification Line protocol on Interface Dot11Radio0, changed state to up
I will appreciate any additional help.
Best Regards,
Igor Sotelo.

EAP-TLS auth between 2 1310 bridges

Hello,
Am working on getting EAP-TLS auth working between a root and non-root 1310 bridge. I've had success getting LEAP working but EAP-TLS is kicking my butt.
I have an ACS 4.1 server acting as the Radius server and the auth is failing there with the code "EAP-TLS or PEAP authentication failed during SSL handshake". I think I'm missing something related to the certs but don't know where.
I can post config snippets if that will help but if someone knows of any examples configuring a 1310 or similar bridge with EAP-TLS that would be fantastic.
TIA,
BR

Hi Bastien,
it is actually what i did.
The point here i have 2 CA involved, with no relation between them.
So I did the operation twice for each CA :
-> making a certificate signing request, sent it to the CA, signed to by the CA and then imported/binded into the ACS
-> I have added the root CA of each CA into the ACS as well.
The point is when a computer, try to connect, it try to verify ACS server identity. And the ACS server only seems to present the certificate signed from CA1.
So when a computer with certificate machine CA2, try to connect, it doesn't trust the ACS server has the ACS sent its certificate signed by CA1.
I don't know how to allow the ACS to present the right signed certificated depending on the cleint that try to connect.
Then another conf I do not understand is the option:
EAP: Used for EAP protocols that use SSL/TLS tunneling --> in local cetificate, when you add a local certificate to the ACS
I do not undestand what does this option stand for ?
Then I culd see into Cisco do :
"For TLS related EAP protocols, a single local certificate is used to authenticate the server for all the TLS related protocol"
Doest it means that the ACS can use only one single certificate for All the TLS protocol configured in the ACS, to authenticate itself to the client?
Or does the ACS can use a diferent local certificate from each dedicated eap-tls protocol?
thx

Connection loss of cisco 1310 bridge.

Hi Experts,
I have cisco 1310 bridge with IOS version Version 12.3(7)JA5. Sometimes bridges are disconnecting by showing the following error message.
*Mar 1 01:22:21.856: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 003a.99eb.cc00 Reason: Previous authentication no longer valid
*Mar 1 01:22:22.115: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:26.414: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:26.484: %DOT11-6-ASSOC: Interface Dot11Radio0, Station SNUDH1BRIDGE 003a.99eb.cc00 Associated KEY_MGMT[NONE]
*Mar 1 01:22:27.386: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:27.388: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 003a.99eb.cc00 Reason: Previous authentication no longer valid
*Mar 1 01:22:30.831: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:31.170: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:31.786: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:31.854: %DOT11-6-ASSOC: Interface Dot11Radio0, Station SNUDH1BRIDGE 003a.99eb.cc00 Associated KEY_MGMT[NONE]
*Mar 1 01:22:33.277: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:33.279: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 003a.99eb.cc00 Reason: Previous authentication no longer valid
*Mar 1 01:22:35.760: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:36.456: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:37.264: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:37.356: %DOT11-6-ASSOC: Interface Dot11Radio0, Station SNUDH1BRIDGE 003a.99eb.cc00 Associated KEY_MGMT[NONE]
*Mar 1 01:22:39.198: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:39.200: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 003a.99eb.cc00 Reason: Previous authentication no longer valid
*Mar 1 01:22:39.518: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:39.771: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:42.093: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
*Mar 1 01:22:43.580: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
Once it is deassossiated, ihave to manually restart the bridges. How can avoid manual restarting so it would automatically associate after some time.
Also time is getting changed after restarting. Please help me to solve this problems.
Regards,
naisam

Hi,
Following are the answers for your questions.
How often does this happen ?
This is happnenig two or three times in a day and mostly at eavening when the data traffic is high.
What is the distance between the bridges and RSSI ?
Distance is near to 600 mtr and RSSI is continously keep on changing between -51 dBM to -75dBM
Did this ever work without this issue or is this a new install ?
This installed one year before as a back up to my fiber link. This problem started recently only.
Thanks,
Naisam

1310 Bridge loses connection

I work at a college campus where we have a couple of 1310 bridges between our main campus and a group of apartment buildings that we own 3 blocks down the road. One 1310 bridge is in our bell tower and the other is in one of the apartments. The other apartments have 1240 AG access points. The problem I am having is that periodically the remote apartments will loose their network connection. Originally I thought it was a problem with the remote bridge because rebooting the bridge at the remote apartment would bring the connection back up. I recently discovered that I could bring the remote location back up by rebooting the bridge in the belltower. At first we could go a couple of weeks before the link would go down now it seems to be happening much more frequently.
Any help in troubleshooting this would be appreciated.
Thanks.
Jeff

You might want to post carrier busy test results for both ends as well as signal strength readings for both ends. If memory serves you'll need commands like (check my syntax):
dot11 dot11 0 carrier busy (assuming 802.11g)
and
show dot11 ass X.X.X (X.X.X = remote end mac)

1310 Bridge RG-59 coax cables.

Hello all, hope everyone is well.
The RG-59 coax cables that come with the 1310 bridge are only 1 foot long. Does anyone know where I could get longer cables as the power injector is quite a distance away because there are no close power sockets. Instead of installing new power sockets near to the bridge, we wanted to simply run longer coax cables.
Hope someone can help!

This cable is standard CATV (cable/dish antenna cable) type RG-6 that is commonly available at any radio or entertainment store - It is exactly the same cable that is used to go from the cable TV receiver to the television - Raw cable and connectors are available from places like Home Depot, Lowes, Walmart etc.
Fred

Aironet 1310 Bridges keep losing connection

There was a similar thread about this last year and I tried what was listed in there to no avail. I have 2 Aironet 1310 bridges, one as a route bridge and the second as a non-route with clients. These worked great for nearly a year, we had no problems keeping the connection up. They were not connected for the last few months but nothing was changed on the configuration, when I put them back up they reconnected just fine and worked for about an hour, not they randomly disconnect with the same message in the log entries below. Is there something wrong with them now? The are using the same antennas as before and are in the same exact locations.
logs from root bridge
Nov 29 13:52:53.311: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:52:53.311: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station XXXX.XXXX.XXXX Reason: Previous authentication no longer valid
Nov 29 13:52:53.568: %DOT11-6-ASSOC: Interface Dot11Radio0, Station Test XXX.XXXX.XXXX Reassociated KEY_MGMT[WPAv2 PSK]
Nov 29 13:55:16.260: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:55:16.260: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station XXXX.XXXX.XXXX Reason: Previous authentication no longer valid
Nov 29 13:55:16.550: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:55:16.550: Client XXXX.XXXX.XXXX failed: reached maximum retries
logs from non-root
Nov 29 2010 13:52:55: %DOT11-4-UPLINK_DOWN: Interface Dot11Radio0, parent lost: Received deauthenticate (2) not valid
Nov 29 2010 13:52:55: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down

I am not at the remote location any more, but the route bridge had a signal of -78 dB and a SNR of -22 dB. The non-route has -77dB for signal and a SNR of -22 dB. The location has line of sight, over water with nothing in the way.
Since I last posted I changed the fragmentation and RTS thresholds back to default from 4000 and it has been up for 24 hours now. I am hoping that it has made the difference.

Aironet 1310 Bridge high retries one direction

We are experiencing a high amount of retries in one direction between two 1310 bridges with external yagi antennas. What would this indicate? Here is a copy of the linktest:
POOR (102% retries) Time   Strength(dBm)   SNR      SNR          Retries
                     msec      In     Out    In      Out         In   Out
      Sent :5000, Avg   5    - 66    - 64    31       45   Tot: 56 10149
Lost to Tgt:   0, Max 49    - 4    - 60   223       50   Max: 12     9
Lost to Src:   0, Min   1    - 72    - 70    22       40
Rates (Src/Tgt)     1Mb 0/2 12Mb 25/25 18Mb 808/807 24Mb 366/366 36Mb 568/56 7 48Mb 1015/1013 54Mb 2218/2219
Linktest Done in 28.106 msec

Good morning,
When (1) bridge had abnormally higher retires than say the other bridge(s) this can be due to a few things. Check the config of the bridge for any odd configurations like packet shaping. Perhaps one bridge is allowing larger packets and these packets arent making it and have to be resent.
Check the phyiscal bridge solution. Is everything tight and weather proof tight. Is the antenna is good shape. Are the cables exposed in anyway.
Also what PERCENTAGE of retries are you seeing ?

1310 Bridge-Building to Building advice.

I am looking at implementing building to building wireless using Cisco 1310 bridges. This would be a backup link between the 2 buildings. The primary link is 3 T-1's. There are about 250 users connecting back here for application and internet. I am assuming that since the speed over the wireless is more than the existing T-1's that there shouldn't be a problem with latency. Am I missing anything with my thinking?
Thanks

Hey there,
If you use a BR1310 to cover 3 T1s you should be fine.
The BR1310 can get up to 54mbs (28mbs in reality due the the nature of half duplex devices such as these bridges).So even with less than ideal signal quality and strength you should have no problem getting that kind of throughput.Ideal links get in the low to mid 20s.
Hope this helps.
Regards,
Aaron

SRP521W - Local and Remote Traffic Cannot be the Same Subnet Address

I support an existing VPN infrastructure with PIX, Juniper NS5GT, and Netopia devices used as VPN endpoints. In all cases, I can create a VPN where the location's internal subnet, 10.x.y.0/24 sends traffic to 10.0.0.0/8 out the VPN tunnel. In the case of this 521W that we are evaluating, it appears that I cannot do this. Insteadm when creating the IPSEC policy I get this error "Local and Remote Traffic Cannot be the Same Subnet Address." Which, while strictly true, has never been an issue with all the above devices. Is there a workaround or other methodology to support this?
Thanks.

We have extactly the same problem with the SRP527W. Other Cisco small business products work like.
Cisco RV 120W
http://www.cisco.com/en/US/products/ps10852/index.html
Cisco WRV210
http://www.cisco.com/en/US/products/ps9929/index.html
We need a device with that supports one IPSec VPN and one ADSL interface and is easy to use like these devices.

Firmware crash on cisco 1310 Bridge while upgrade to higher version

Dear experts,
My cisco 1310 Bridge old firmware C1310-K9W7-tar.123-8.jea3 is crash while i try to upgarade to the higher version C1310.K9W7-tar.124.10b.jda2 via HTTP service upgrade, any advise to get back the firmware.
rgds,
woo.

It appears that you are assigning IP address properly. For some reason we are not getting a response from TFTP server. This is typically one of 2 things:
1. Firewall on the TFTP server workstation
2. Connectivity issue between AP and TFTP server
I would check firewall settings on the TFTP workstation. Are you connecting the AP to the workstation directly or through a switch? If it is through a switch, you could plugin a different workstation to the AP switchport to make sure it could reach the server as well.
-Pat

Aironet 1310 bridge does not reestablish connection

We have an aironet 1310 bridge installed (root/non root) where the non root drops sometimes the signal when the morning sun is in direct line with the link. This blackout problem is known. What bothers me is the fact that the bridge does not automatically reestablish the association...
Once it has been lost we have to restart the Air 1310, then it re-associates. Is there a workaround or an automatism?
Thank you for your suggestions.
Bert

This should be automatic. I had a client have this problem once, and we found that the problem was actually with the 1310 being configured in diversity mode. The 1310 would disconnect in tough weather conditions and try to connect to the little metal stub that comes on the bridge. The signal was too weak to establish a good connection, but for some reason it would not switch back.
So check to see if you have diversity mode enable, and disable it if it is. If that's not the problem, I'm not sure what it could be. Have you tried upgrading the IOS?

1310 Bridge Firmware and Console Troubles

A few days ago, we lost the Ethernet connection to one of our 1310 Bridges. Restarting the unit restored access for a short time. A technician tried to reload the IOS over the console port and set the speed to 115200, and then lost the ability to communicate with the device. I have tried to console into the device using every speed from 110 to 921600, but cannot establish a connection. Also, the LEDs are showing a firmware load error (red, amber, red). Is this device bricked, or is there a way to recover it?
Thanks in advance.

You'll have to try password-recovery process. Here's the link:
https://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#ca_1310_ser

QoS for locally generated mgmt traffic

Hi all,
If two tetra cards (GSR GE Linecards) are connected back to back and run ebgp (vrf level) between them. I presume the locally generated bgp traffic (prec 6) automatically goes into the default queue if multiple output queues are present?
If the connecting link uses discard-class wred for implementing wred in the output direction, what happens to this management traffic in terms of wred?

Check here :
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt4/qcfcbshp.htm

1310 bridge - transparent to local WEP'ed traffic?

Similar Messages

Maybe you are looking for