1941W Vlans on wirless network

I am new to this
intergrated router and AP. I followed the basic config and have it working. I can get to any network from wireless or wired lan to internet.
Now i want to setup a VLAN for the wireless side that can not get the the wired lan, just out to the internet.
I tryed a few things but I just dont understand the config well to to this.
can someone post a config?

Hi,
I have set up my 1941w in the same way as what you are trying.
Look for my posts "working 1941w config" as I have attached a full working config with access control lists applied to the VLANS assigned to the wireless AP's.
This example should help you finish off your config.
Regards,
John.

Similar Messages

HT2495 I have a wirless network. I connect all my computers to it and a printer. I can print wirelessly from all computers. I tried to add the printer to my new Macbook, but can't find the printer on the add printer and scan icon on preferences.

I have a wirless network. I connect all my computers to it and a printer. I can print wirelessly from all computers. I tried to add the printer to my new Macbook, which is connecte to the network, but can't find the printer on the add printer and scan icon on preferences. I downloaded a installation printer utility from the Manufacturer (lexmark), but it didn't work. Any sugestions?
Thanks,
Ivette

You would need to get the IP address of your printer then manually add a network print queue.
To get the IP address, on the control panel of your printer, press on Setup > Network Setup > TCP/IP > View/Set IP address.

Secured wirless network question

hi
Can I access a secured wirless network by any chance?
thanks

If I understand your question correctly.....NO. Accessing a secured network "by chance" is almost impossible. Now can some one access a secured network..... Maybe. Secured networks are protected by a password and if the password can be obtained then your in, however passwords on networks are highly encrypted. It would be a lot of work so some one would probably have a darn good reason to want in.

Unable to access wirless network

my parents had a linksys wireless router (model befw11s4)installed into their house a few years ago....needles to say, no one has attempted to connect using the wirless router until i got here. when i did try connecting to the SECURITY-ENABLED WIRLESS NETWORK i did not get a password prompt....instead it ran as if i did and still did not connect me, saying i needed a network key.

You may open the web setup utility page of the router by typing its IP address on your browser's address bar. By default, it is 192.168.1.1. When you're asked for username, you may leave it blank. For password, its "admin". Go to Wireless>then the wireless security subtab(Or if you see a WEP KEY SETTINGS button on it you can see it there). Key1 is your network key there. If you typed that in your network key box, you should be able to go online afterwards. Reset your router on the back if it does not work so you won't be prompted any keys. That'll set your router to default which has no security if you want to...
"The war between heaven and hell depends on the choices we make, and those choices require sacrifice. That's the test"

Problem connect to wirless network after belle upd...

i update my phone to belle and now i can't access to wirless network i set the preshared key and it accepted but i can't access i restart my phone N8 and router so many but still the problem

in access connections tool tab> location switching do you have this checked
mine takes 1 -2 seconds
Thinkpad R61 7733-1GU
Thinkpad X61T 7762-54U
Thinkpad X60T 6363-4GU
Did a member help you today? Thank them with a Kudo!
If a post answers your question, please mark it as an "Accepted Solution"!
Regards,
GMAC

HT5569 When my daughter uses her i-phone on our wirless network at home does it use data from our data plan when she plays games or aps from her phone?

When my daughter uses her I-phn on our home wirless network does it still use data from our data plan? Thanks.

No. As long as she's connected to WiFi, no cellular data is being used.

Changing native vlan on running network

I want to change the native vlan on running network. a network include 30 switches . there is loop free topology .
unfortunately native vlan is vlan 1 and also management network .
in my test environment :
if I go to a switch and change native vlan from 1 to 100 the stp will Block the link for vlan 1 and i lose my access to the switch and then i should go to other side and change the native vlan to 100.
i just want to know the best practice for this situation.
Thanks !

Correct. As soon as you change it to 100, you will lose access to the devices since vlan 1 is used for management. To shorten the down time, you can create vlan 100 and all the SVIs on all switches ahead of time and than change it form 1 to 100 in a maintenance window.
HTH

Setting up a Printer over Wirless Network

I have a MacBook Pro and a Old G4 Mirror Door connected to a Linksys Wirless Router in my home. I only have one phone jack in my house and its in the kitchen.:( So I put an Airport card in the G4 so I could have my computer in my office. I have a hp Deskjet 3650 connected directly to the G4 via USB. What I'm wondering is.. is there a way that I can print to this printer from my MacBook Pro over the network? Or does the printer have to be connected directly to the wirless router?
Hope someone can help.
Cheers,
Adam
17' MacBook Pro Mac OS X (10.4.6)

You certainly can set up a printer this way. Go to the Print & Fax preference pane in the System Preferences. Click on the Sharing tab, enable "Share these printers with other computers", and make sure that the check box next to your printer is checked.

Guest Vlan on umnaged network

I've bought some unifi wifi access points which I want to add to our network. We use a mix of cisco and netgear switches (I'll be phasing out the netgears over time). I'd like to make a guest vlan for the wifi, I'm just not sure how is best to do it, there are some details on a possible setup here.
At the moment we have an unmanaged network so everything is using vlan1
We use 2 Cisco Pix 515e firewall's (One as backup), they go directly to a switch, then we use a Windows server for DHCP. The config for firewall (fw1) the interface that connects to a switch is:
speed 100
duplex full
nameif inside
security-level 100
ip address 192.168.135.248 255.255.192.0 standby 192.168.135.249
on the switch it connects to called sw1 (C2950-I6Q4L2-M) the port is configured like so:
interface FastEthernet0/15
switchport mode trunk
switchport nonegotiate
speed 100
duplex full
Port Gi/02 connects to the next switch which is a netgear GS748T (sw2) which then connects to various other switches
interface GigabitEthernet0/2
description Netgear GS748T
switchport trunk allowed vlan 1-4
switchport mode trunk
switchport nonegotiate
speed 1000
duplex full
flowcontrol receive desired
(There are some other vlans created, not sure what they are for yet, I'm new here!)
We've just bought a Cisco WS-C3650-24PS - sw3
I was thinking of only plugging in the wifi access points into cisco switches only and creating a Vlan - Vlan20 and only allowing Vlan20 to specific ports if this is possible?
I'm a beginner at this so the theory is there but not sure how to execute it!
I'm thinking on the firewall fw1
eth2
speed 100
duplex full
nameif guest
security-level 90
ip address 192.168.0.248 255.255.255.0 standby 192.168.0.249
on sw1 connect Gi0/2 to sw3 Gi1/1/1
config to be
switchport trunk allowed vlan 20
switchport mode trunk
switchport nonegotiate
speed 1000
duplex full
sw3 will already have vlan1 going to it as part of the unmanaged network as it is connected to another switch on another port already.
So my question is how do I setup the dhcp server on sw3 for vlan20 (192.168.0/24)
And how would both vlans get sent to the wifi access points which are patched into sw3 but without vlan 20 traffic being sent other ports which do not have the ap's connected to them? I would also like to allow vlan20 to another cisco switch.
Or if is the wrong way of doing it let me know a better solution
Apologies in advanced if this is not making much sense!

I actually use UniFi APs in our environment too, great little APs as long as you buys the Pro models (the standard ones have their short falls).
I think your PIX config looks good (it's been a while since I've touched one so I'd have to login to the 525 I have at home to confirm) Just ensure it's configured to disallow traffic from your guest VLAN to the internet network, if memory serves there's an option that's on by default to disallow traffic from a higher security if to a lower.
It may be better to configure Sw1/0/2 and Sw3/1/1/1 with all of your VLANs, if you want redundancy you can create a LAG between the two with multiple ports. If you use different links for different VLANs and down the road something happens and both of those ports become active on the same VLAN (I/E you or someone else forgets that you're using different uplinks for different VLANs) if STP isn't setup properly you'll create a loop on that VLAN potentially flooding the network with broadcast traffic.
As for the UniFi config, you configure the ports that the APs connect to as trunks, I assume you'll be managing the APs over VLAN 1 so the ports should be VL1 untagged, VLAN 20 tagged.
The UniFi Controller software is used setup and manage the APs if you haven't already done so install it. Once you have it installed you want to create two SSIDs one without VLAN tagging enabled which will be your internal SSID, and another with VLAN tagging enabled for VL20 which will be your guest SSID. This way when a client connects to the Guest SSID the AP(s) will tag their traffic VLAN 20, so on ingress to SW3 the traffic will be tagged with the correct VLAN.
The attached is a screen from my UniFi guest SSID config, you can also assign guests to a user group, which allows you to limit the bandwidth at the AP.

VLAN for Wireless network

Dear Team,
If wireless is setup in a corporate network and there is no requirement to provide guest access to outside users, is it still recommended to segregate the Wireless network? What are the advantages for segregating wireless network considering that wireless users will have complete access to corporate network. Kindly share your views if the total number of users in office is less than 50.
Reason is because, we do not have a Layer 3 switch, hence if VLAN is required for small number of users, we will have to enable it on the WAN router.
Would appreciate if you can share any documentation related to best practices. Thank you.
Regards,
Manoj

Hi Manoj,
I agree with Scott,
If you have same subnet for wired & wireless, then devices like Laptops will get same network IP for wired & wireless, client devices may not like that & sometimes may not work.
It is always good idea to have two seperate network for wired & wireless. From scalability point of view having a L3 switch in your network is always beneficial
HTH
Rasika
**** Pls rate all useful responses ****

Printing through Wirless Network

Dear All,
i have the following problem ...
we have printers on local network 192.168.100.XXX ....<-- DHCP is disables
our Cisco Wirless LAN Controller is on different network 192.168.105.XXX .... <-- DHCP enabled
the wirless device is connected to the local network switch 192.168.100.2 so its having the same gateway as the local network.
How can I enable printing through wireless.
awaiting your prompt feedback guys.

i hope this is clear ...
so can what configuration i have to enable any wirless user to print through local printers.
Printer doesn't have wireless !!
i am not trying to give you a hard time but i really need your help in this.

Does CISCO C3560X VLAN support multiple Network segments which are further configured with HSRP function

Hi Cisco experts,
My name is Kumagai and I need your expert opinions below.
I am trying to configure one VLAN1 support multiple network segments as below.
(this should be a very straight forward configuration and should be OK, I think ? )
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
The only issue that is eating me is the above network segments are using HSRP too
and I am not sure is this possible with a combination of VLAN1 supporting multiples which are
further supported with HSRP settings in Cisco environment.
!example of HSRP:
interface Vlan4
ip address 172.30.4.253 255.255.255.0
no ip redirects
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
<<< what will happen if I add the HSRP configuration as below into the above VLAN1 with multiple Network segment ??)
I would like to summarize my "Combined" configurations as below but I need your expert opinions on
whether the configuration below is workable without any problem ??
Or it is a total flop because Cisco does not support the configuration below !!!
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
standby 30 ip 172.30.31.254
standby 30 priority 105
standby 30 preempt
standby 60 ip 172.30.61.254
standby 60 priority 105
standby 60 preempt
standby 70 ip 172.30.71.254
standby 70 priority 105
standby 70 preempt
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
Thanking you in advance !!!!!

Hi,
As far as i know we dont set the ip helper address on the radio interface. It should be on the L3 interface of corresposding VLANs i.e.
int vlan 20
ip helper-address 192.168.33.xxx
int vlan 60
ip helper-address 130.20.1.xxx
I'm assuming that your using SVI's (int Vlan 20 and int Vlan 60) rahter than physical interfaces. Also hope you have configured switch port as trunk where this AP is connected.
Modify the AP config as below since you are using data vlan as the native vlan
interface Dot11Radio0.20
encapsulation dot1Q 20 native
interface FastEthernet0.20
encapsulation dot1Q 20 native
Ideally your AP fastethernet configuration should looks like below and not sure how you missed this as this comes by default when you have multiple vlans for multiple ssids.
interface FastEthernet0.20
encapsulation dot1Q 20 native
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface FastEthernet0.60
encapsulation dot1Q 60
no ip route-cache
bridge-group 60
no bridge-group 60 source-learning
bridge-group 60 spanning-disabled
Hope this helps.
Regards
Najaf

VLANs in OSPF network?

Scope of Inquiry:
I've supported heterogeneous networks for merely a decade, but never quite big enough to expose me to Enterprise routing/switching concepts in real-time. I've supported numerous Metro Ethernet hub and spoke topologies, as well as a few racks in a datacenter environment ... however, once again ... no real application of OSPF, EIGRP, etc.
I'm learning some of the fundamental concepts of OSPF, adjacency, LSA types, etc... but one thing that has me tripped up is whether or not/how VLANs would be leveraged in a real-world scenario, in an OSPF environment.
Can anyone kindly give me a very clear and concise explanation/high-level explanation of the contextual application of VLANs in an OSPF network, including whether or not tags would exist in each area, etc. * Please do not pontificate --- that is to overstate a simple explanation with extraneous details that are outside the scope of a basic/real-world explanation. Hope that wasn't too terse, but I'm trying to gain a working knowledge of the protocol and its nuances quickly.
Thanks!
-Data-

Hi, I am afraid you chose the wrong forum. This one is mostly about contact centers. You might have to send your question to Routing&Switching section.
G.

Actual purpose of native vlan in real network

Hi,
Somebody please explain me what is the actual purpose native vlan in real scenarios.I have ready many documents related native vlan and I know it will never tag the vlans.But I want to know in which situation configure native vlan in our real network.
thanks in advance..
Regards
Prajith

The native VLAN is simply tagged to all traffic on a trunk link that does not already have an 802.1q tag. Some people use this for security purposes setting the native VLAN to a VLAN that is shutdown/disabled so untagged traffic essentially gets dropped. Another application of where I've seen native VLANs used is on access point trunk ports where the management VLAN is set to native so the AP gets an IP address from it.

Linksys wirless network help

I have a genral question sorry if this has been asked before but i have a dell pc and a linksys wirless router and want to get a power book will i be abel to use my rrouter and still get on line with my apple computer

Routers are a rare breed of hardware that is platform independent. Your PB should recognize the wireless network automatically with no intervention from you. Routers are amazing devices!

1941W Vlans on wirless network

Similar Messages

Maybe you are looking for