Autonomous access point IP redirection

Hi!
I have a captive portal and autonoumous AP and I need to redirect tthe traffic of one SSID to this portal.
I'm using ip redirection but it doesn't work. I need to redirect dns and I configured an acl.
This is my configuration:
ip access-list extended redirect_acl
permit udp any any eq domain
permit tcp any any eq domain
permit tcp any any eq www
permit tcp any any eq 443
permit icmp any any
dot11 ssid PROVA
ip redirection host 10.3.0.2 access-group redirect_acl in
The routes are ok. The traffic knows how to go and return to the captive portal.
Thank you,
Regards.

Refer the document :
http://www.cisco.com/c/en/us/td/docs/wireless/technology/ip-redirect/technical/reference/ipredir.html#wp36517

Similar Messages

Convertion from Lightweight to Autonomous access points

Is it possible to convert AIR-LAP1121G-E-K9 Lightweight access point to autonomous access point.

Hi tm,
You can convert AIR-LAP1121G-K-E9 to autonamus access point,pls do follow the procedur
Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
Step 3 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, and c1240-k9w7-tar.default for a 1240 series access point.
Step 4
Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
Step 5
Disconnect power from the access point.
Step 6
Press and hold MODE while you reconnect power to the access point.
Step 7
Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
Step 8
Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
Step 9
After the access point reboots, reconfigure it using the GUI or the CLI.
Thankx&Regds
Saji k.s

Types of Autonomous Access Point in the Cisco Market.

Hi All,
I am quite new to the wireless technologies. I need some help in understanding the basic models of Cisco wireless Hardware available in the market (Enterprise Level).
From my initial studies in past 24 hours what i understand is that Autonomous AP are the wireless AP which does not require Controllers. they needs to be configured on their on. So far i could find Cisco Aironet C1130 AG models which can be used as Autonomous Access Point.
Can anyone suggest any other Cisco AP which can be used as Autonomous Access Point?
Can 800 Series wireless routers be used as Autonomous Access Point?
Do we have any ISR Modules which can be inserted on a router to have a Autonomous Access Point?
Thanks.

I have short listed the routers in 800 series: 891W, 892W, 892F-W, C887VA-V-W, 861WDoes the command you have mentioned make these routers as Autonomous?
Of the 800 series (I have no knowledge about the 1900W), there are only five sub-models that have built-in wireless.
850W & 870W both have autonomous-only AP. These two models are already end-of-sale. So we scratch those two out of your list.
860W, 880W and 890W both have builti-in AP. The APs can operate EITHER in autonomous or controller-based. You can easily convert the AP from either controller-based to autonomous (and vice versa) by using the router command I've posted in my previous response.
A simple guide when dealing with the 800-series router. Notice that we end our models with a "0"? This basically is the sub-model. The one's that you've listed ends with different digit, like a 1, 2, 7. This is the "flavours". 7, for example. are xDSL WAN interface. If it ends in a 1, the WAN interface is Fast/GigabitEthernet. If I remembered correctly, the 2 has a fibre optic port as a WAN interface. The 887VA means it's a xDSL with Annex "M", I think, and it's geared up for voice.
It would be great if you could point out some models or PID of AP which will work in ISR G2 2900 3900 routers.
Go here. I'd recommend the 2600 access point. There are two sub-models: one with internal antenna (ends with an "I") and one with an external antenna (ends wth an "E"). If you want the "E", be aware that you need to purchase the appropriate antennas separately. If the APs are to be used indoors, use the "I".
Go through this other document: Wireless LAN Compliance Status
Make sure you get the appropriate AP with the correct regulatory domain of the country where the AP is going to be installed. For example, if the AP will be installed in USA, then get the one with the regulatory domain of "SAP2602I-A-K9" where "-A" is the regulatory domain of the USA.

Logging devices connected to autonomous access points

Is there a way to log the devices that connect to a particular SSID of an autonomous access point? If yes, will you please show me a configuration example that will allow me to send that data to a logging server? If possible I will need to do this on 1250, 1240 and 1140 series access points.
Thanks!

I suppose this all depends on "what" excatly you are wanting to log. I haven't tried this, but you should be able to send SNMP traps to a remote SNMP receiver (client associations or failures, interfaces status, etc). Take a look at the AP IOS Configuration Guide, see what you think, and whether or not the SNMP traps you can send are of value to you. I have anchored this to the Configuring System Message Logging section: http://www.cisco.com/en/US/docs/wireless/access_point/12.4.25d.JA/Configuration/guide/scg12.4.25d.JA-chap21-msg-logging.html#wp1002608
If you are wanting to capture more granular information, such as session lengths, data traffic, internet usage, etc; for monitoring or reporting, that would probably require an appliance of a higher level.

Idle Users on Autonomous Access Points

Is there a way to set an idle timeout value on Autonomous Access Points? I have been researching and I see it is possible to do this on a WLC using Lightweights but the only timeouts I can find regarding Autonomous are Session/Holdoff and Re-authentication timeouts.
I would like to set an idle timeout so that only inactive clients will be disassociated however if I set a Re-authentication timeout for say 15 minutes, then someone who is genuinely using the wireless network for that period of time or longer would have to re-authentication also - which is something I would like to avoid.
Thanks.

timeout settings in Autonomous AP
https://supportforums.cisco.com/discussion/12302606/how-configure-session-time-out-cisco-autonomous-ap

Chromecast with Autonomous Access Points

I have a client that has a Chromecast, with a 1010 and a 1130 Autonomous access points. I can not get the Chromecast to work. Can someone tell me how to enable mDNS, or Multicast on these access points?

Hi Abhishek,
On which software code of Autonomous AP, you can run above command ?
We prefer you to check these commands & make sure they works in the products mentioned in this thread before responding.
Otherwise your/Cisco credibility lost based on the responses you make, if they are not related to the question asked.
As per below, this command is applicable for IOS based controllers & not applicable to Autonomous AP.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/5700/software/release/ios_xe_33/service_discovery_gateway_DG/b_service_discovery_gateway_DG/b_service_discovery_gateway_DG_chapter_010.html
HTH
Rasika

Cisco autonomous access points and WCS

Hi, I'm trying to add my autonomous access points to WCS which I have done but I'm not getting any performance data or errors etc.
Does anyone know if WCS support autonomous access points or do I have to use WLSE to get this info
Thanks

Greetings the WLSE will be needed to manage autonomous access points. The WCS application is geared towards LWAPP and Controller based implementations.
For a comparison please see the following document.
http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html#http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html?linkpos=4#number_4
Regards

Migration from autonomous access point mode to lightweight mode on 1530

1500 series is not mentioned on:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html
Can it actually be upgraded just by changing IOS from APto CAP?

The 1530 should have the image k9w8 alreadyin flash:
Autonomous Mode Configuration
The 1530 Series allows the Unified (controller-based) and Autonomous mode software to be loaded at the factory on the same hardware part number. This eliminates the need for separate part numbers for controller-based units and autonomous mode units.
At boot-up, the default mode is controller-based. The 1530 will power up and begin searching for a controller. Once it joins the controller, it will download the active Unified image from the controller. This is the same operation as other Cisco controller-based APs.
For Autonomous mode, the user should take the following steps:
Step 1 Power the AP and connect to the console.
Step 2 From the Command Line, enter:
AP # capwap ap autonomous (# means privileged EXEC mode)
Step 3 The system will respond with "Convert to Autonomous image. Proceed? (yes/[No]):"
Step 4 Type "yes" to confirm.
Step 5 The AP will then re-boot and load the Autonomous image. The unified image is erased.
Step 6 Once the 1530 has booted in autonomous mode, configuration of the AP can done by following the procedure outlined here:
http://www.cisco.com/en/US/partner/docs/wireless/access_point/12.4_10b_JA/configuration/guide/scg12410b.html
You can probably issue a dir or show flash: and then if the image is there, you can boot to it.
Example:
config t
boot system flash:/ap3g2-k9w8-mx.v152_4_jb/ap3g2-k9w8-mx.v152_4_jb
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Configuring ssid and vlans on autonomous access point ?

here is an a demonstration of how to configure vlans and ssid on a auto-ap , what i dont understand is when i configure the ssid under (interface dot11radio0) and the vlan under that command , why do i need to configure sub-interfaces for the "fastethernet" and the "dot11radio0" if i already configured it under the "interface dot11radio0" , why do i need the "encapsulation dotq x" ? and what is bridge-group ?

If you want to use multiple SSID with multiple vlan, then you have to configure subinterfaces on Radio interfaces (in both Radio 0 & Radio 1 if you want to use both 2.4GHz & 5GHz band) & Ethernet interfaces.
AP simply bridge wireless traffic to wired interface using these sub-interfaces. To specify which radio sub-interface traffic to map to ethernet sub-interface, a Bridge-Group number (1-255) is used.
Bridge-Group 1 always used for native vlan traffic & usually used for AP management.
HTH
Rasika
**** Pls rate all useful responses ****

Getting error message with 1230 autonomous access point

When try to add a new WLAN, i get an error
This 'VLAN ID' is already in use. Choose an unique VLAN ID
I am using an old image 12.3(2)JA2
can somebody guide me on the same
Thanks in advance
Nikhil

Go ahead and post your config as it is, as well as the commands you're trying to enter. It sounds like the VLAN you're wanting to use is already in use by another SSID, or at least the AP thinks it is.
Keep in mind that you can only have one SSID per VLAN.

Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?

Hello Wireless Experts,
I was able to order AIR-OPT60-DHCP on controller based AP AIR-CAP2602I-E-K9 using CCW, but this option is not available on autonomous AIR-SAP2602I access points.
Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?
Thanks.
George

That is a feature and only used in lightweight access points. The standalone autonomous access points don't use that. Just follow the configuration guide for your access point to get you started.
Sent from Cisco Technical Support iPhone App

Finding the manufacture date on an access point via software

I'd like to determine the manufacture date of our access points because we plan on converting to LWAPP? Can someone tell me the what CLI command to use and which field has the answer. thanks.

Hi Thomas,
Not sure about finding the Manufacture date (maybe you are trying to find out about the presence of a MIC certificate) but we did go through this coversion from Autonomous to Lightweight on our infrastructure last summer.In this process we did convert about 70 1121's and 1231's to LWAPP and it worked very well. Here are some relevant docs;
Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode
From this excellent doc;
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html
The following Cisco Aironet access points have the ability to operate as autonomous access points or lightweight access points:
Cisco Aironet 1240 AG Series Access Points
Cisco Aironet 1230 AG Series Access Points
Cisco Aironet 1200 Series Access Points that contain 802.11g (AIR-MP21G-x-K9) and/or second-generation 802.11a radios (AIR-RM21A-x-K9 or AIR-RM22A-x-K9)
Cisco Aironet 1130 AG Series Access Points
Cisco Aironet 1100 Series Access Points that contain 802.11g radios (AIR-AP1121G-x-K9)
Cisco Aironet 1300 Series Access Points/Bridges (AIR-BR1310G-x-K9 or AIR-BR1310G-x-K9-R).
From this doc;
http://www.cisco.com/en/US/products/ps6521/prod_bulletin0900aecd80321a2c.html
Guidelines and Tools for Migrating to the Cisco Unified Wireless Network
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns337/networking_solutions_white_paper0900aecd804f1a23.shtml
Self-Signed Certificate Manual Addition to the Controller for LWAPP-Converted APs
LWAPP secures the control communication between the AP and the WLC by means of a secure key distribution. The secure key distribution requires already provisioned X.509 digital certificates on both the LAP and the WLC. Factory-installed certificates are referenced with the term "MIC", which is an acronym for Manufacturing Installed Certificate. Aironet APs that shipped before July 18, 2005, do not have MICs. So these APs create an SSC when they are converted to operate in lightweight mode. Controllers are programmed to accept SSCs for the authentication of specific APs.
http://www.cisco.com/en/US/products/ps6521/products_configuration_example09186a00806a426c.shtml
LWAPP Upgrade Tool Troubleshoot Tips
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a008072d9a1.shtml
Also, 5 points for Eric! For all your great work here lately.
Hope this helps!
Rob

Upgrading Access Point

Can anyone help me to upgrade the autonomous access point to light weight mode?
AP : Cisco 1120
Should i give controller credentials ?
I have tried with Upgrade Tool and it is not happening,Also i am not getting any error.
Can anyone help me quickly ?
Regards,
Senthil

Hi,
Yes you should give controller credentials for time synchronization. Does your 1120 have a MIC or SSC? You might need to add the certificate to the system if it is old enough to have SSC.
If it is in the same subnet as the controller, you might want to try to use a tftp server and try the archive download command from the AP.
Which version of the upgrade tool do you use?
What do you see on the AP console?
Tx
Jerome

Autonomous Wireless Point-to-Point bridge

I am hoping someone can point me in the right direction.
I am having difficulty finding documenation on hwo to properly configure Cisco 1552e AP's in Autonomous Mode as Point to Point wireless bridges with just utilizing the wireless link as a backhaul, not client access. We have to go with autonomous because we plan on having Local Mode ap's (CAPWAP) terminated behind the MAP ethernet bridged port. Here is our topology:
Local Network (Controller resides on this network) ---------> L2 Switch ----------> RAP --------> wireless bridge <---------- MAP <----------> L2 Switch ----> Clients\CAPWAP AP's (servicing clients)
We want to pass all the VLANs we will need for both the wired network and CAPWAP network.
Thoughts?

rasikanayanajith wrote:Here is another example of point to point bridge configuration (with EAP-FAST) using Autonomous Access point, it may help you as wellhttp://mrncciew.com/2013/11/09/wireless-bridge-with-eap-fast/HTHRasika*** Pls rate all useful responses ***
This is extremely useful and the exact configuration we are looking to do.
Is there a limit on the number of Bridge-Groups that can be used (essentially number of VLANs)?
Also are you familiar with running Mesh AP's in autonomous mode? Do we lose any features other than management by moving them from CAPWAP to Autonomous?
We have to run these in autonomous because our MAP end will run 3602i local mode APs, so lame that Cisco wont support Capwap over CAPWAP based mesh bridge.

Configuring Cisco Access Points 1602i Air-SAP-1602I-Z-K9

Hi everyone,
I am having touble configuring cisco access points 1602i. I have configured them and they are broadcasting SSID and clients are able to connect to them, but the only thing which is troublesome is speed. I have 100Mbps bandwidth speed but at access point I am getting speed between 17 to 25. Can anyone please tell me where I am gone wrong.
I have Juniper Srx210 configured as backbone for providing internet on fiber. Then further I have attached one POE switch (managable). From that switch I have attached 4 access points.
One more thing,two ports of Juniper is configured as Vlans, one for staff and one for students. I have attached this POE switch to Student Vlan, but haven't configured ports of POE switch as trunk. Please tell me do I have to configure ports as trunk on POE Switch. Is this the cause of slow bandwidth over access points.
I am also planning to go for Wlan Controller to manage Access points. When I contact my supplier about it, told me the following:
"You just need to convert the Access points to autonomous mode. Here are some details, there is no additional charge."
https://supportforums.cisco.com/message/3889653
http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
http://www.youtube.com/watch?v=QQ_NuxdRhQ4
https://supportforums.cisco.com/docs/DOC-14960
I looked at the links but couldn't understand properly. Then I searched over the internet and found out that
"a cisco autonomous access point basically runs on its own while a lightweight access point uses a centralized device called a wireless lan controller to get its configuration. autonomous access points are managed individually, while the lightweight access points can be managed centrally. also, the switchport configurations to support both types of access points will differ. "
I didn't understand, why he suggested to go for Wlan controller and to upgrade access points to autonomous mode, when according to above finding, it says that autonomous access points runs individually.
Please advice.
I shall be thankfull

Hello Scott and Leo,
Thanks for all your help.
I have managed to install and configure 4 Access points and Now Access points are giving speed between 25 to 45Mbps. Still not enought but it sloving the purpose. Everyone is enjoying their face book. I will soon get the Cisco Wlan Controller as well. I dont know if there is a way to get more speed from these access points. I am ready to buy more equipments if required.
Anyway, today I need your guys expretise once again. As you know Junipr Srx 210 is configured for fiber internet to provide internet services to school. Now we are changing the building and transfering the line to new building. This time I want to use Cisco router in place of Juniper Srx210. But I need to know what model will support the current configuration for fiber. Would you please tell me what model/series router will be suitable for fiber internet and for implementing other restrictions.
I am attaching a picture of current jiniper Srx 210 for your consideration.
I shall be very thankfull to you
Sarabjit

Autonomous access point IP redirection

Similar Messages

Maybe you are looking for