Aironet 1400 Bridge with IAS

Hi,
If the 1400 root bridge is configured for EAP, what are the options for EAP authentication methods to be configured on a Microsoft IAS radius server in order to authenticate the 1400 non-root bridge?
LEAP is out since it is not supported on IAS, so what are the available options other than using static WEP keys?
Thanks

According to
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm (701)
the 1410 is not on the list. Now this could be because the 1410 is EOL.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Similar Messages

Question about aironet 1400 bridge

We are currently trying to set up a link
across the street using 2 bridges. My concern is more of a mounting one and what needs to be visible for the link to work
We are 13 stories up ..and the building across the street is 11 stories up...
We have purches the 9.5 dbi sector antenna. Can I keep the Bridge itself
on the inside and just mounth the antenna
on the outside? While reading the doc, it appeared that the Bridge itself had an antenna

Hi Richard,
The 1400 can be ordered in two models as shown below (with either one the Bridge itself will be mounted outdoors);
Cisco Aironet 1400 Series Bridge with 22.5 dBi Antenna
The Cisco Aironet 1400 Series Wireless Bridge features an 802.11a 5.8 GHz radio, which supports data rates up to 54 Mbps. With this option, a 22.5 dBi patch array antenna is integrated into the ruggedized enclosure
Cisco Aironet 1400 Series Wireless Bridge with Captured Antenna
Product Number
AIR-BR1410A-A-K9
Cisco Aironet 1400 Series Wireless Bridge with N-Type Connector
A connectorized version provides professional installers with an N-Type connector that allows the deployment of the root nodes of point-to-multipoint networks with omni-directional or sector antennas, or of high-gain dish antennas for longer links (Table 2).
Table 2 Cisco Aironet 1400 Series Wireless Bridge with N-Type Connector
Product Number
AIR-BR1410A-A-K9-N
http://www.cisco.com/en/US/products/hw/wireless/ps5279/prod_technical_reference09186a0080184933.html
Quick Start Guide Cisco Aironet 1400 Series Wireless Bridge
http://www.cisco.com/en/US/docs/wireless/bridge/1400/quick/guide/br1410qs.html
The 9.5 Sector Antenna is used for Point to Multi-Point Links;
1400 With 9.5 Sector;
http://www.cisco.com/en/US/docs/wireless/antenna/installation/guide/14sect.html
Hope this helps!
Rob

JDBC-ODBC Bridge with iAS on UNIX

Can the Sun JDBC-ODBC bridge be used with iAS on UNIX (Solaris)? If possible, can someone share the basic steps. For example, what parameters to enter when configuring the bridge as a datasource and also how to pass needed environment variables (LD_LIBRARY_PATH has to have the path of the ODBC driver manager).
I need to connect to a ODBC driver on UNIX, no JDBC driver is available for this data source, nor is a Windows solution acceptable.
I have iAS 6.0 SP3 with iWS 4.1 SP9 on Solaris 8.

Hi,
I'm not sure if there is a free download available, but you can find some help by visiting the following URL http://www.dbmaker.com/Header/Frame_Forum.htm
For the exact steps, I think this would be more helpful http://www.dbmaker.com/reference/technotes/jdbc.html
Please let me know if this helps.
Regards
Raj

JDBC-ODBC Bridge with iAS on Solaris

Is there any way to use the Sun JDBC-ODBC bridge with the iPlanet
Application Server running on UNIX (Solaris)? If it is possible, can
someone who has done it share the basic steps. For example, I cannot
figure out what parameters to enter when configuring the bridge as a
datasource and also how to pass certain environment variables (eg the
LD_LIBRARY_PATH which points to the ODBC driver manager).
It seems that on Windows iAS has ODBC as a Type 2 JDBC data source (at
least the manuals have screenshots with ODBC nodes). However I need to
have iAS running on Solaris (and connecting to a proprietary ODBC
driver; no JDBC driver is available for this data source).
I have iAS 6.0 SP3 with iWS 4.1 SP9 on Solaris 8.
TIA!
George
P.S. Apologies if this is a frequently asked question, but I could not
find archives of the iplanet.ias.* groups. I wish Google would carry
them...

Hi,
I'm not sure if there is a free download available, but you can find some help by visiting the following URL http://www.dbmaker.com/Header/Frame_Forum.htm
For the exact steps, I think this would be more helpful http://www.dbmaker.com/reference/technotes/jdbc.html
Please let me know if this helps.
Regards
Raj

Aironet 1400 bridge Radio 802.11a disable

I have some problem with 802.11A radio is enabled but the detaild status is still display software status is disabled and hardware status is down. I checked the settings on Enable Radio is checked on enable. I can't get any radio accross. Any ideas whereelse I can check to get this working?
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
power local 18 <<<<<<<<<<< I can't input this line from the command line. I assume that the bridge is taking the MAX setting. Please helps.
power client 18
packet retries 128
station-role non-root
rts threshold 4000
rts retries 128
concatenation
beacon period 20
infrastructure-client
I am really appreciated that everyone can give me some helps.
Thanks
CD

Hi Jeff
I copy the configuration of the bridge. This is a new bridge that I setup as a role non-root bridge. with the new default configuration, as soon as I changed the role to non-root bridge, the 802.11A interface is down and disabled. Is it normal operation and how do I enable it back? any helps I am really appreciated that
Thanks
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname NonRootBridge1
no logging console
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
resource policy
clock timezone MST -7
clock save interval 24
ip subnet-zero
ip domain name NonRootBridge1
dot11 activity-timeout bridge default 10000
dot11 ssid LabTest
   vlan 51
   authentication open
   infrastructure-ssid
dot11 network-map
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid LabTest
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
packet retries 128
station-role non-root bridge
rts threshold 4000
rts retries 128
cca 90
concatenation
beacon period 20
infrastructure-client
interface Dot11Radio0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface FastEthernet0
no ip address
no ip route-cache
interface FastEthernet0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface BVI1
ip address 192.168.0.10 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 protocol ieee
bridge 1 route ip
line con 0
line vty 0 4
sntp server 192.168.0.50
sntp broadcast client
end

Aironet 1400 Point to Multipoint Bridging

Hello Everybody
I`m already desinging a Wireless Point to Multipoint Bridging with Aironet 1400. I was Wondering if on the Central point the 1400 should has a external omnidireccional anntena to support all the others bridges... that is: this AP will be the multipoint bridge.
Could I use all the 1400 AP with integrated anntenas and get that the Central AP work in a multipoint configuration?
Thanks in advance.

Hi,
Cisco Aironet 1400 has a model with integrated 22.5 dBi patch array antenna, the AIR-BR1410A-A-K9.
The integrated radio and high-gain integrated patch array antenna is used in point-to-point links and the non-root nodes of point-to-multipoint networks.
You can (need to) use the external omnidirectional AIR-ANT58G9VOA-N antenna type for your N-type root bridge unit (AIR-BR1410A-A-K9-N).
Basically, these models are ideal for each other in both point-to-point & point-to-multipoint connectivity scenarios.
Cisco 1400 N-type is recommended to use the following external antenna type:
* 9.0 dBi vertically polarized omni antenna --> you need this
* 9.5 dBi sector antenna with support for vertical or horizontal linear polarization
* 28.0 dBi dish antenna with support for vertical or horizontal linear polarization
ref: http://www.cisco.com/en/US/partner/products/hw/wireless/ps5279/products_data_sheet09186a008018495c.html
Aironet 1400 Bridge Ref:
http://www.cisco.com/en/US/partner/products/hw/wireless/ps5279/prod_technical_reference09186a0080184933.html
Rgds,
AK

Configuration of a Point to MultiPoint link with Cisco Aironet 1310 bridges

Hi All,
The previous problem of which I started another conversation here:
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddba023
somehow dissapeared. It could have been a problem of interferences.
I have another issue with other (multipoint) wireless WAN link, which I hope has a solution.
On the central node, we have an Cisco Aironet 1310 bridge configured as root-bridge. It has a panel of four vertical polarity 17 dBi panel 90? antennas, with more than enough gain (there is a 250 mWatts 802.11 b/g amplifier, before the 4-way splitter) and excellent line of sight to three remote bridges.
The three (03) remote bridges are also Aironet 1310 models, confidured as non-root-bridges.
The problem we have is that it seems that when the three remote links operate concurrently the amount of lost packets is huge. When I shutdown the radio interfaces of two bridges, the remaining bridge makes an excellent link with the central node.
It seems that some hours are more critical than others, also the links operate much worse when there is some (small) network traffic in them.
I have read the 1310 manuals, and I can't find a sample configuration for point to multi-point links.
Does someone knows what radio interface configuration should I need to use to establish better quality communication?
I mean, perhaps the 1 x root - 3 x no root configuration is not recommendable for the multipoint link configuration.
Any hints will be welcome.
Best Regards,
Igor Sotelo.

Hi All,
Thank you for the information. I configured the distance on the root bridges, but the links showed instability.
I'm using a bi-directional amplifier. It has two pieces. According to the manuals, one is installed indoors, the other outdoors. I'm not sure if the indoors piece has the transmition module or it's only the injector.
We could establish connection at 7 km (around 4 milles) distance from the central point, using 24 dBi antennas on the other side.
However, we have issues with a near located point that is only 1.2 Km (around 0.8 milles) away and has a 13 dBi integrated patch antenna. The signal strenght value we get there is in the -62 to -68 dBm range, and is noticiably (5-10 dBm) lower than the strenght we get at other points of the link. And I have trouble establishing a high quality link with that point, using OFDM modulation. I tend to think that if I remove the amplifier I'm not going to reach that point at all. The EIRP on the central iste is 34 dBm / 2.5 watts, without amplifier it would be 26 dBm / 0.4 watts.
On the opposite sites the EIRP is 33 dBm / 2 watts using CCK or 28 dBm / 0.63 watts using OFDM.
When one looks at the central site from that point, an Motorola Canopy with passive reflector (EIRP 48 dBm or around 64 watts) can be seen. It doesn't have the same direction, but the opposite site must be large distance and could interfere with my wireless network. Attached is an amplified photo of the view. It's safe to assume that the Canopy operates in the 2.4 GHz frequency range.
Once I connect the point at 1.2 Km, the multipoint link loses its quality, and soon the lost packets get too frequent.
The CCK seems to be much more interfered than OFDM, I guess because of that canopies.
Another thing I'm wondering about is if the Aironet 1310 can continuosly switch CCK-OFDM over the same point - multipoint link, without losing packets.
What other parameters should I tweak? Is there a way to avoid interferences fromt the canopy?
I would like to apply 100 mWatts local power using the radio with OFDM, but it seems that's not possible.
Best Regards,
Igor Sotelo.

3502p AccessPoint support MESH and Point-to-Point Wireless Bridging with Outdoor Antennas??

I need to know if 3502p with outdoor antennas supports Point-to-Point Wireless Bridging??

The 3502p is only used for arenas and or stadiums. These are different units than the 3500's and 3600's. So no they can't be.
You can use Cisco Aironet 1400 Series Wireless Bridge for a wireless link between two buildings (1km) to extend your LAN. For more detail you can go through the below link.
http://www.cisco.com/en/US/prod/collateral/wireless/ps5679/ps5279/ps5285/product_data_sheet09186a008018495c.html

Security on Aironet 1300 bridges

I am a newbie on this fourm. I required your suggestions and recommendations. I have aironet 1300 bridges. I want to connect them in point to multipoint envt.
I want to have one root bridge and rest as non root bridges. But i want to implement authentication of non-root bridges through root bridge. Please suggest what is the latest and strongest authentication and security protocols that i can use. Please i am looking for an early response.

EAP Authentication type provides the highest level of security for your wireless network. By using the Extensible Authentication Protocol (EAP) to interact with an EAP-compatible RADIUS server, the root access point/bridge helps another access point/bridge and the RADIUS server to perform mutual authentication and derive a dynamic unicast WEP key. The RADIUS server sends the WEP key to the root access point/bridge, which uses it for all unicast data signals that it sends to or receives from the non-root access point/bridge. The root access point/bridge also encrypts its broadcast WEP key (entered in the access point/bridge's WEP key slot 1) with the non-root access point/bridge's unicast key and sends it to the non-root access point/bridge.

Encrypting Aironet 1410 bridge link using multiple VLANs

I've looked at the documentation available for Aironet 1400 series, and still would like to see a single document showing an example of
the best encryption/authentication available for bridge links using multiple VLANs.
As I understand it, 1400 series can support WPA-PSK using AES, which would work for me. I just can't picture how to integrate chapters 9 and 10 for the 'WEP and WEP Features' + 'Configuring Authentication Types' instructions.
I'm looking either for an example config, or a step-by-step that did all steps consecutively.
Thanks

What doc are you refering to? If you want to encrypt the link from root bridge to non-root bridge, then WPA/TKIP-PSK is what you should use. Here is a link to how to setup your link ssid to WPA: http://www.cisco.com/en/US/docs/wireless/bridge/1400/12.2_15_JA/configuration/guide/p15auth.html#wp1044935
Don't worry about the example they show on the WEP, just use the configuration from the above link for your encryption.
Configuring a VLAN
Configuring your bridge to support VLANs is a five-step process:
1. Create subinterfaces on the radio and Ethernet interfaces.
2. Enable 802.1q encapsulation on the subinterfaces and assign one subinterface as the native VLAN.
3. Assign a bridge group to each VLAN.
4. (Optional) Enable WEP on the native VLAN. <-- Use WPA-PSK
5. Assign the bridge's SSID to the native VLAN.
http://www.cisco.com/en/US/docs/wireless/bridge/1400/12.2_15_JA/configuration/guide/p15vlan.html
Here is an example of vlan 1 (native) will be your management and your wireless link. vlan 10 & 20 will pass through the link.
BR# configure terminal
BR(config)# interface dot11radio0.1
BR(config-subif)# encapsulation dot1q 1 native
BR(config-subif)# bridge group 1
BR(config-subif)# exit
BR(config)# interface fastEthernet0.1
BR(config-subif)# encapsulation dot1q 1 native
BR(config-subif)# bridge group 1
BR(config)# interface fastEthernet0.10
BR(config-subif)# encapsulation dot1q 10
BR(config-subif)# bridge group 10
BR(config)# interface fastEthernet0.20
BR(config-subif)# encapsulation dot1q 20
BR(config-subif)# bridge group 20
BR(config-subif)# exit
BR(config)# interface dot11radio0
BR(config-if)# ssid batman
BR(config-ssid)# vlan 1
BR(config-ssid)# infrastructure-ssid
BR(config-ssid)# end

Aironet 1310 Bridges keep losing connection

There was a similar thread about this last year and I tried what was listed in there to no avail. I have 2 Aironet 1310 bridges, one as a route bridge and the second as a non-route with clients. These worked great for nearly a year, we had no problems keeping the connection up. They were not connected for the last few months but nothing was changed on the configuration, when I put them back up they reconnected just fine and worked for about an hour, not they randomly disconnect with the same message in the log entries below. Is there something wrong with them now? The are using the same antennas as before and are in the same exact locations.
logs from root bridge
Nov 29 13:52:53.311: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:52:53.311: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station XXXX.XXXX.XXXX Reason: Previous authentication no longer valid
Nov 29 13:52:53.568: %DOT11-6-ASSOC: Interface Dot11Radio0, Station Test XXX.XXXX.XXXX Reassociated KEY_MGMT[WPAv2 PSK]
Nov 29 13:55:16.260: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:55:16.260: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station XXXX.XXXX.XXXX Reason: Previous authentication no longer valid
Nov 29 13:55:16.550: %DOT11-4-MAXRETRIES: Packet to client XXXX.XXXX.XXXX reached max retries, removing the client
Nov 29 13:55:16.550: Client XXXX.XXXX.XXXX failed: reached maximum retries
logs from non-root
Nov 29 2010 13:52:55: %DOT11-4-UPLINK_DOWN: Interface Dot11Radio0, parent lost: Received deauthenticate (2) not valid
Nov 29 2010 13:52:55: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down

I am not at the remote location any more, but the route bridge had a signal of -78 dB and a SNR of -22 dB. The non-route has -77dB for signal and a SNR of -22 dB. The location has line of sight, over water with nothing in the way.
Since I last posted I changed the fragmentation and RTS thresholds back to default from 4000 and it has been up for 24 hours now. I am hoping that it has made the difference.

Aironet 350 Bridge associations

Hi,
I have 2 aironet 350 bridges that keep disassociating and then reassociating constantly. Is there any way to stop this form happening?

Parent is "Root Bridge", end station is "Non-root bridge w/out clients." Thanks for pointing me to the Express setup page--that's the one I had in mind, but I haven't been there since day one. Now I need to figure out why, with those settings, it's allowing client connections...
The only MAC address filtering I see is (per documentation) "allow or disallow the forwarding of unicast or multicast packets either sent from or addressed to specific MAC addresses." When I look at the actual Address Filters page, it only allows me to specify "Dest Address." Not much help if I don't want to allow other connections *to* the bridge...
When I'm not in Express Setup, and go to the Setup page, I have the option at the bottom of the page (Network Ports | Bridge Radio or Network Ports | Root Radio) to go to an Advanced page. While there, I see a field called "Radio Cell role." The Root Radio Advanced page shows the Radio Cell role as "Access Point / Root." The other options would be "Client/Non-root" and "Repeater/non-root." The Bridge Radio Advanced page shows the role as "client/non-root." I am *assuming* that the Root radio here, although called an "access point" is not an access point for clients (i.e., its role is that of the access point for the far end(s) of the bridge).
I can't find anyplace to stop broadcasting the SSID...
Thanks for the help!
t

Cisco Aironet 1400 - security

Dear all,
I'm currently configuring 2 Cisco 1400 Bridges. One is the root bridge the other the non-root bridge (ok logic :-) ).
I wanted to know what is possible for using certificates for the non-root bridge or to use the local radius on the root bridge to increase the security level of the wlan network.
I tried to reach the local radius on the root bridge, but I'm always getting a 404 error. After reading some Cisco docs, it said that we need to use AAA new model from the CLI, I did it without success.
What would you recommend to ensure a good security level for the wireless link?
I'm open to use certificates or a Radius (local or IAS) or any suggestions you may have.
Any help or or suggestions are very welcomed...
Thanks per advance,
Regards

The only EAP types supported by BR1410 is LEAP. You should able to configure LEAP client on the non-root bridge:
http://www.cisco.com/en/US/docs/wireless/access_point/12.2_15_JA/configuration/guide/s15rep.html#wp1036921
The above URL is for repeater; however, it is the same for non-root bridge.
You may already know. If you want to set up local radius server, the following URL should be useful:
http://www.cisco.com/en/US/docs/wireless/access_point/12.2_15_JA/configuration/guide/s15local.html

Aironet 1310 bridge does not reestablish connection

We have an aironet 1310 bridge installed (root/non root) where the non root drops sometimes the signal when the morning sun is in direct line with the link. This blackout problem is known. What bothers me is the fact that the bridge does not automatically reestablish the association...
Once it has been lost we have to restart the Air 1310, then it re-associates. Is there a workaround or an automatism?
Thank you for your suggestions.
Bert

This should be automatic. I had a client have this problem once, and we found that the problem was actually with the 1310 being configured in diversity mode. The 1310 would disconnect in tough weather conditions and try to connect to the little metal stub that comes on the bridge. The signal was too weak to establish a good connection, but for some reason it would not switch back.
So check to see if you have diversity mode enable, and disable it if it is. If that's not the problem, I'm not sure what it could be. Have you tried upgrading the IOS?

1400 bridge and VLANs

I have two sites bridged with 1400 bridges.
I wish to bridge a single vlan between the two sites. However I want to setup the bridges with management IP's on seperate subnets (the local management subnet for each site).
The only way I can get this to work without bridging various vlans together is to not use the BVI1 interface and apply the bridge management ip to a subinterface as per below:
interface FastEthernet0.816
encapsulation dot1Q 816
ip address 10.97.16.100 255.255.255.0
no ip route-cache
bridge-group 2
bridge-group 2 spanning-disabled
interface BVI1
no ip address
no ip route-cache
Then not bridge this vlan816 on the radio interface.
The issue with this is that the snmp process on these bridges seems to be hard coded to bind only to BVI1 - hence snmp does not work at all. I have a TAC case in re the snmp which is obviously a bug. However I was wondering if anyone else has met these similar requrements via another means?
Thanks for any help.
Kent.

Hi.
You only way, you can access to the bridge using IP (snmp or other protocols)is configuring BVI1 with ip, in the VLAN what ever you want or chose for management and the same ip range an vlan for the other bridge and BVI1 too, because the APs o bridge only can bridge IP over this BVI1.
Regards.

Aironet 1400 Bridge with IAS

Similar Messages

Maybe you are looking for