Can a wireless router (station role non-root) associate to 2 APs ?

can a wireless router (as station role non-root) associate to 2 simultaneous APs ?
say something like this on an 18xx router:
dot11 ssid firstAP
dot11 ssid secondAP
interface Dot11Radio0/1/1
ssid firstAP
ssid secondAP
what I want is something like two virtual-radios/VLANs/whatever with two independent outside routes; say:
ip address dhcp for ssid firstAP
ip address dhcp for ssid secondAP
where firstAP is my AP and secondAP is a near free hot-spot AP (authentication open)

Nice idea but unfortunatelty it won't work. You can only associate one radio to a single infrastructure device at any one time.

Similar Messages

SAP 1602 Wireless bridge issue. Non root bridge loses it's configuration

Hi guys,
Today I tried to configure wireless link between two autonomous AP 1602 APs.
There is a problem with Non-root bridge. I configured it with this command:
AP2(config-if)#station-role non-root wireless-clients
Non-root bridge successfully joins the root bridge (root AP). Anyway, this configuration does not work, if I reload my non-root bridge. Even without reload, If I check my non-root bridge configuration it looks like this:
interface Dot11Radio1
no ip address
no ip route-cache
encryption vlan 1 mode ciphers aes-ccm
ssid WiFi-Bridge
antenna gain 0
stbc
beamform ofdm
Command "station-role non-root wireless-clients" is missing here. But I just configured it few seconds ago... Does anyone know, where could be a problem?

Okay... Everything works with OPEN ssid. Not with my WPA 2 configuration.
On both APs configuration looks like this:
dot11 ssid Private
   vlan 10
   authentication open
   authentication key-management wpa version 2
   guest-mode
   wpa-psk ascii 7 01100F175804575D72
interface Dot11Radio0
encryption vlan 10 mode ciphers aes-ccm
ssid Private
infrastructure-client ( on Root AP)
station-role root bridge wireless-clients ( on Root AP)
Few debugs:
*Mar 2 09:57:30.554: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 9c02.986d.9675 Reassociated KEY_MGMT[WPAv2 PSK]
*Mar 2 09:57:30.938: dot11_auth_client_abort: Received abort request for client 9c02.986d.9675
*Mar 2 09:57:30.938: dot11_auth_client_abort: No client entry to abort: 9c02.986d.9675 for application 0x1
*Mar 2 09:57:30.938: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 9c02.986d.9675 Reason: Sending station has left the BSS
*Mar 2 09:57:30.986: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 9c02.986d.9675 Reassociated KEY_MGMT[WPAv2 PSK]
*Mar 2 09:57:31.350: dot11_auth_client_abort: Received abort request for client 9c02.986d.9675
*Mar 2 09:57:31.350: dot11_auth_client_abort: No client entry to abort: 9c02.986d.9675 for application 0x1
*Mar 2 09:57:31.350: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 9c02.986d.9675 Reason: Sending station has left the BSS
*Mar 2 09:57:31.398: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 9c02.986d.9675 Reassociated KEY_MGMT[WPAv2 PSK]
*Mar 2 09:57:31.766: dot11_auth_client_abort: Received abort request for client 9c02.986d.9675
Everything works with android device and WPA2 if I change configuration to this:
dot11 ssid Private
   vlan 10
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 01100F175804575D72
interface Dot11Radio0
encryption vlan 10 mode ciphers aes-ccm
ssid Private
station-role root
mbssid

Can a wireless router be used with an iMac G5 AND a Windows laptop

I currently have a BT Broadband connection on my iMac G5 through a Speedtouch 330 modem.
I want to move to a wirless router so I can access the net on at least 2 laptops running windows at the same time as the Mac is connected to the net
Which router is best and what should I look out for.
Also, is there a simple guide anywhere that explains routers and what one needs to do to make them work?
Mant thanks
Jammi

Make sure that your modem has an Ethernet output.
Usually the default settings of the router are all you need.
Any wireless router will do what you want.

Best wireless router (apple or non-apple) for use with multiple Macs

What is the best wireless router, from any manufacturer, for use with 3-5 Macs? (in a reasonable price range... sub $150)
least problems
most reliable
strongest signal/best range
fewest drops
fewest reboots

The Apple Routers "just work".
I also have a linksys. It takes a good bit of knowledge and aggravation getting it set up, but once working it does fine.
If you plan to use your router to share a printer, hook to your stereo, etc. definitely stick with Apple. It will save you much grief.

Can a Wireless Router work with Comcast Cable

My son bought a WRT110 and gave up trying to get an internet connection to stay connected. I believe that the problem was the cable modem. Has anyone been successful?

He spent several hours with support in Argentina. They finally told him that the problem was the fact that his telephones were 2.4 MHz.

Wireless Root Bridge - Non Root Bridge

I've been reading a lot about bridge configuration for wireless AP but i cannot make it work the following scenario:
PC -- ethernet port --> Non-Root-Bridge -----------> Root Bridge ---------> Switch
vlan111                     native 18 - vlan111           native 18 - vlan111      vlan native 18,111
Its pinging fine between switch and Non-Root. But when i put vlan111 on Non-Root the two AP's stop responding to the network.
What am i doing wrong? Plz i need some help!! I have two 1242.
------------------------ Root Config ----------------------
dot11 syslog
dot11 vlan-name JGS111 vlan 111
dot11 vlan-name JGS18 vlan 18
dot11 ssid WGB
   vlan 18
   authentication open
   guest-mode
   infrastructure-ssid
username Cisco password 7 047802150C2E
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid WGB
station-role root bridge
infrastructure-client
interface Dot11Radio0.18
encapsulation dot1Q 18 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface Dot11Radio0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
bridge-group 111 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.18
encapsulation dot1Q 18 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
bridge-group 111 spanning-disabled
interface BVI1
ip address 10.1.8.50 255.255.255.0
no ip route-cache
ip default-gateway 10.1.8.254
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
------------- Non-Root-Bridge -------------
ot11 syslog
dot11 vlan-name JGS111 vlan 111
dot11 vlan-name JGS18 vlan 18
dot11 ssid WGB
   vlan 18
   authentication open
   guest-mode
   infrastructure-ssid
username Cisco password 7 14341B180F0B
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid WGB
station-role non-root bridge
infrastructure-client
interface Dot11Radio0.18
encapsulation dot1Q 18 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface Dot11Radio0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
bridge-group 111 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.18
encapsulation dot1Q 18 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
bridge-group 111 spanning-disabled
interface BVI1
ip address 10.1.8.51 255.255.255.0
no ip route-cache
ip default-gateway 10.1.8.254
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip

Try this:
interface Dot11Radio0.18
encapsulation dot1Q 18 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
bridge-group 111 subscriber-loop-control
bridge-group 111 block-unknown-source
no bridge-group 111 source-learning
no bridge-group 111 unicast-flooding
bridge-group 111 spanning-disabled
interface FastEthernet0.18
encapsulation dot1Q 10 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.111
encapsulation dot1Q 111
no ip route-cache
bridge-group 111
no bridge-group 111 source-learning
bridge-group 111 spanning-disabled
Make sure your switchort is setup similar
interface GigabitEthernet0/7
description 1242 AP Bridge
switchport trunk encapsulation dot1q
switchport trunk native vlan 18
switchport trunk allowed vlans 18,111
switchport mode trunk
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Changing native VLAN on non-root bridges

I have quite a few 1310 Bridges setup in point to multipoint configuration with a root bridge with a sector antenna at the campus network and remote sites connecting in. I have multiple VLANs trunked onto one SSID, this allows for having multiple vlans in use at the remote site. The problem is I want to configure some remote site bridges with a different native vlan than the standard allowing me to plug the client directly into the injector and eliminate the need for a vlan aware switch. I have tried to configure the the "encapsulation dot1q VLAN# native" but this swaps the bridge group on the subinterface to a bridge-group 1 .
! Last configuration change at 01:23:08 UTC Tue Sep 15 2009 by Cisco
! NVRAM config last updated at 01:23:09 UTC Tue Sep 15 2009 by Cisco
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no aaa new-model
dot11 ssid Cisco-24
vlan 1
authentication open
authentication key-management wpa
guest-mode
infrastructure-ssid optional
wpa-psk ascii test
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm tkip
encryption vlan 1 mode ciphers aes-ccm tkip
encryption vlan 901 mode ciphers aes-ccm tkip
encryption vlan 902 mode ciphers aes-ccm tkip
encryption vlan 904 mode ciphers aes-ccm tkip
ssid Cisco-24
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0
station-role non-root bridge
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface Dot11Radio0.901
encapsulation dot1Q 901
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
interface Dot11Radio0.902
encapsulation dot1Q 902
no ip route-cache
bridge-group 254
bridge-group 254 spanning-disabled
interface Dot11Radio0.904
encapsulation dot1Q 904
no ip route-cache
bridge-group 253
bridge-group 253 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
hold-queue 80 in
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0.901
encapsulation dot1Q 901
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
interface FastEthernet0.902
encapsulation dot1Q 902
no ip route-cache
bridge-group 254
bridge-group 254 spanning-disabled
interface FastEthernet0.904
encapsulation dot1Q 904
no ip route-cache
bridge-group 253
bridge-group 253 spanning-disabled
interface BVI1
ip address 10.0.0.100 255.255.255.0
no ip route-cache
ip default-gateway 10.0.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
snmp-server community misdept RO
bridge 1 route ip
line con 0
line vty 0 4
login local
end

Correct. As soon as you change it to 100, you will lose access to the devices since vlan 1 is used for management. To shorten the down time, you can create vlan 100 and all the SVIs on all switches ahead of time and than change it form 1 to 100 in a maintenance window.
HTH

Non-root is not associate with root

I am working to setup the non-root associate with root. I have checked every configuration from the root are the same as non-root. Accept it set to non-root.
- It is the same VLAN, SSID, authentication is open. I have encryption from both sides are the same.
It is still not associated. What else should I check from the non-root to get association? Please give me some helps
I am really appreciated that.
The root configuration:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
hostname Root_Bridge
no logging console
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
resource policy
clock timezone MST -7
clock save interval 24
ip subnet-zero
ip domain name Bridge
ip ssh time-out 60
ip ssh version 2
no dot11 igmp snooping-helper
dot11 vlan-name Management vlan 51
dot11 vlan-name User vlan 11
dot11 ssid LOCALBRIDGE
   vlan 51
   authentication open
   infrastructure-ssid
dot11 network-map
crypto pki trustpoint TP-self-signed-4076113752
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4076113752
revocation-check none
rsakeypair TP-self-signed-4076113752
crypto pki certificate chain TP-self-signed-4076113752
certificate self-signed 01
30820261 308201CA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34303736 31313337 3532301E 170D3032 30333031 30303030
33345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30373631
31333735 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B329 87F691CA 1107EC3A 9EF4676D 2F96A7E4 42DBB88F 426D78C1 0E9E09A0
8F5EA9A1 DF88C33A A0DF128A E13E6E59 E9232487 0F5C953C 274DF314 1F48544F
E213D232 85B1E45A 4D186A9E FF9581E6 3E471891 16B627B6 CB3D8F01 BCFF89E0
77E8EA44 0E255F75 BFF1299A B3198E9B 61B3056B 8F365D98 2A8D463E F3122C47
B80D0203 010001A3 81883081 85300F06 03551D13 0101FF04 05300301 01FF3032
0603551D 11042B30 29822737 3332385F 42726964 67652E64 61766973 2D6D6F6E
7468616E 2E616363 2E64732E 61662E6D 696C301F 0603551D 23041830 1680145F
9DB7F2A6 BD563ACB 429F6938 6AF9D336 69139F30 1D060355 1D0E0416 04145F9D
B7F2A6BD 563ACB42 9F69386A F9D33669 139F300D 06092A86 4886F70D 01010405
00038181 00372387 521D029A FAE2F579 73EDCF3B FDF262EE 5DF6154E 5469A5BD
6630E5FD C8A1311A A24493D4 D1856862 8979692B CDFE65D7 29E97B60 FCC37584
A27FA332 9CC5F175 2EDC871C D41BA4F5 A50634DE 75210305 47240D4F A30D0046
532F68ED 569CE374 98C5F53D A417CFBF 3A93C98A D399B06E A73E61AB D4889452
0B695B54 86
quit
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption key 1 size 128bit 7 E99521751C16125A7754722A6B72 transmit-key
encryption key 2 size 128bit 7 1857F02303182327EA1A9242A53B
encryption key 3 size 128bit 7 FE1CF103855EBB2763224F129556
encryption key 4 size 128bit 7 19A03A5D596B029A01C208EF1C0F
encryption mode ciphers wep128
encryption vlan 11 key 1 size 128bit 7 419258EC0B7E6C7413C571760B67 transmit-key
encryption vlan 11 key 2 size 128bit 7 AB3C5B091B37223F39306B1F7442
encryption vlan 11 key 3 size 128bit 7 3E1CF103855EBB2763224F129556
encryption vlan 11 key 4 size 128bit 7 E858C5382B5D5E372A6C0438604C
encryption vlan 11 mode wep mandatory
encryption vlan 51 key 1 size 128bit 7 90792B34ACD2C8D18A0B7AF3AC68 transmit-key
encryption vlan 51 key 2 size 128bit 7 72063EA2FEF03A39E5468E92A7C5
encryption vlan 51 key 3 size 128bit 7 8607AEADB49EE0B7E4529770D9AE
encryption vlan 51 key 4 size 128bit 7 F60210B48CB39887A59255187D6D
encryption vlan 51 mode wep mandatory
ssid LOCALBRIDGE
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
packet retries 128
station-role root
rts threshold 4000
rts retries 128
cca 87
concatenation
distance 5
beacon period 20
infrastructure-client
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
no snmp trap link-status
bridge-group 11
interface Dot11Radio0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface FastEthernet0
no ip address
no ip route-cache
hold-queue 80 in
interface FastEthernet0.11
encapsulation dot1Q 11
no ip route-cache
no snmp trap link-status
bridge-group 11
interface FastEthernet0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface BVI1
ip address 192.168.0.5 255.255.255.0
no ip route-cache
no ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
logging history informational
snmp-server view dot11view ieee802dot11 included
snmp-server community PUBLICSTRING RW
snmp-server chassis-id Bridge
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps entity
snmp-server enable traps disassociate
snmp-server enable traps deauthenticate
snmp-server enable traps authenticate-fail
snmp-server enable traps dot11-qos
snmp-server enable traps wlan-wep
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps cpu threshold
snmp-server enable traps aaa_server
snmp-server enable traps envmon
snmp-server host 192.168.9.10 PUBLICSTRING
tacacs-server host 192.168.6.100
tacacs-server host 192.168.4.100
tacacs-server directed-request
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 protocol ieee
bridge 1 route ip
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
line vty 5 15
access-class 111 in
end
The non-root configuration:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname Bridge
logging console informational
logging monitor informational
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa cache profile admin_cache
all
aaa session-id common
resource policy
clock timezone MST -7
clock save interval 24
ip subnet-zero
ip domain name Bridge
no dot11 igmp snooping-helper
dot11 activity-timeout bridge default 3600
dot11 vlan-name Management vlan 51
dot11 vlan-name User vlan 11
dot11 ssid LOCALBRIDGE
   vlan 51
   authentication open
   infrastructure-ssid
dot11 network-map
no crypto provisioning petitioner
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption key 1 size 128bit 7 E99521751C16125A7754722A6B72 transmit-key
encryption key 2 size 128bit 7 1857F02303182327EA1A9242A53B
encryption key 3 size 128bit 7 FE1CF103855EBB2763224F129556
encryption key 4 size 128bit 7 19A03A5D596B029A01C208EF1C0F
encryption mode ciphers wep128
encryption vlan 11 key 1 size 128bit 7 419258EC0B7E6C7413C571760B67 transmit-key
encryption vlan 11 key 2 size 128bit 7 AB3C5B091B37223F39306B1F7442
encryption vlan 11 key 3 size 128bit 7 3E1CF103855EBB2763224F129556
encryption vlan 11 key 4 size 128bit 7 E858C5382B5D5E372A6C0438604C
encryption vlan 11 mode wep mandatory
encryption vlan 51 key 1 size 128bit 7 90792B34ACD2C8D18A0B7AF3AC68 transmit-key
encryption vlan 51 key 2 size 128bit 7 72063EA2FEF03A39E5468E92A7C5
encryption vlan 51 key 3 size 128bit 7 8607AEADB49EE0B7E4529770D9AE
encryption vlan 51 key 4 size 128bit 7 F60210B48CB39887A59255187D6D
encryption vlan 51 mode wep mandatory
ssid LOCALBRIDGE
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
packet retries 128
station-role non-root bridge
rts threshold 4000
rts retries 128
cca 87
concatenation
beacon period 20
infrastructure-client
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
no snmp trap link-status
bridge-group 11
interface Dot11Radio0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface FastEthernet0
no ip address
no ip route-cache
hold-queue 80 in
interface FastEthernet0.11
encapsulation dot1Q 11
no ip route-cache
no snmp trap link-status
bridge-group 11
interface FastEthernet0.51
encapsulation dot1Q 51 native
no ip route-cache
no snmp trap link-status
bridge-group 1
interface BVI1
ip address 192.168.0.10 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
snmp-server community PUBLICSTRING RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps entity
snmp-server enable traps disassociate
snmp-server enable traps deauthenticate
snmp-server enable traps authenticate-fail
snmp-server enable traps dot11-qos
snmp-server enable traps wlan-wep
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps cpu threshold
snmp-server enable traps aaa_server
snmp-server enable traps envmon
snmp-server host 192.168.9.10 PUBLICSTRING
tacacs-server host 192.168.6.100
tacacs-server host 192.168.4.100
tacacs-server directed-request
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 protocol ieee
bridge 1 route ip
bridge 11 protocol ieee
line con 0
line vty 0 4
end

what happens if you go completely open, no WEP?
and I wouldn't use WEP, it's very breakable.
Steve

Dot11Radio0 stuck in reset status after changing the station role

Hi Everyone.
I've got a AIR-AP1231G-A-K9 router. IOS has been upgraded to the latest version c1200-k9w7-mx.123-8.JED. Everything worked fine before I change the station role from root to repeater or workgroup bridge. Following is my configuration:
ap#sh run
Building configuration...
Current configuration : 1224 bytes
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap
enable secret 5 $1$KHHu$bN/odUmHdmb.0cwa57GYs1
ip subnet-zero
no aaa new-model
dot11 syslog
dot11 ssid Lanyard
authentication open
username Cisco password 7 123A0C041104
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid Lanyard
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 11.11.11.1 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
bridge 1 route ip
line con 0
line vty 0 4
login local
line vty 5 15
login
end
ap#sh ip int bri
Interface IP-Address OK? Method Status Protocol
BVI1 11.11.11.1 YES NVRAM up up
Dot11Radio0 unassigned YES NVRAM up up
FastEthernet0 unassigned YES NVRAM up down
ap#
Then I changed the station role
ap#conf t
ap(config)#int dot 0
ap(config-if)#station-role repeater
ap(config-if)#end
ap#sh ip int brie
Interface IP-Address OK? Method Status Protocol
BVI1 11.11.11.1 YES NVRAM down down
Dot11Radio0 unassigned YES NVRAM reset down
FastEthernet0 unassigned YES NVRAM up down
ap#
Interface Dot11Radio0 stuck in reset. No matter I reload or powercycle the AP, I still get the same reset status on Dot11Radio0.
Please help! Any input will be appreciated.

In order to get either the repeater or the workgroup bridge functionality working, you would likely need to have a Cisco AP as root. This is because the repeater and workgroup-bridge functionalities require Cisco Aironet Information Element (IE), which requires a Cisco root AP. There is no standard for interoperability for these functionalities (not part of any 802.11 standards). You can always try to connect them, making sure that they are using the same authentication/encryption configuration. However, it is unlikely to work.

Non-root bridges associating with each other.

We have a point to multi-point bridge setup with 3 BR1310s. One is set to be a root bridge and the other two are set to be non-root bridges. From past experience (not to mention Cisco documentation) I would expect the 2 non-roots to associate to the root. What is happening is that one of the non-roots associates with the root and the other non-root associates with the first non-root. The good bit is that everything still works, the puzzling bit is why this is happening, the bridges are physically in a V pattern so there's no reason for the second non-root to behave as it is, even if we force it off the first non-root it just jumps right back in there again. Bridges are all running 12.3.4-JA.

Configurations of both non-root bridges attached. I've just found out that the customer has mounted the second non-root bridge in such a way that there is probably no line of site to the root bridge (failing to follow clear instructions!) which explains why we can't get it to associate with the root bridge but doesn't explain how it can associate with the other non-root. The only thing I can think of is that both are "non-root with clients" and the second bridge is being accepted as a client rather than a bridge.

HT4145 Can I link up a Dlink wireless router to a Airport Base Station

Hi All,
need advise on whether can I link up a Dlink wireless router to a Airport Base Station and if can how do I set it up.
with regards and thank you
Chris

If your goal is to either extend the D-Link's Wi-Fi network with the AirPort or the other way around, then the answer is no. That is because, most non-Apple routers are not WDS-compatible with the AirPorts.

I have a Cisco wireless router. Can I buy an Airport Express plug in booster for a distant part of my house or do I need an Airport Extreme base station instead to make the Airport Express plug in booster work?

Can I buy an Airport Express plug-in wifi signal booster to connect to a Cisco wireless router, or do I have to buy an Airport Extreme base station to make the Airport Express plug-in work?

You would need either an AirPort Extreme or an AirPort Express connected to the Cisco router, with a permanent Ethernet cable connection.
Configure the Extreme or Express that is connected to the Cisco router to "create a wireless network".
Then, you could add an AirPort Express to "extend a wireless network" to provide more wireless coverage for the network that the Extreme or Express would be creating.
Remember that the Express can only "extend" the quality of signal that it receives, so it must be located where it can receive a strong signal from the "main" AirPort.
If you don't need the Cisco wireless signal, you could turn it off.....or use that network for guests or something similar.
The bottom line here......you always need two Apple routers if you want to extend the network wirelessly.

I recently purchased an airport extreme base station. I want to replace my older linksys wireless router. I had a successful set up but can not get it to talk to broadband modem, I am missing something but what?

I recently purchased an airport extreme to replace my older linksys wireless router. had a successful set up but can not get connected to the internet. for some reason, which I am sure is apparent to others, i am missing some needed info to connect to the dsl broadband modem that I have. would love some good tips.

Try this:
Turn off or remove power from the DSL model, the router, and your computer. Wait not less than one minute. Restore power to the modem and wait until the status lights indicate a connection to the ISP. Next, restore power to the router and wait until the status light shows connection to the modem. Last, turn on the computer. Check your Network preferences to be sure they are configured for a DHCP connection and that the router has received a valid IP address (not 169.xxx.xxx.xxx).

Aironet 1310 non-root with wireless clients

I have two 1310s. One set as a root-bridge with wireless clients, another as a non-root bridge with wireless clients. The wireless side of things is working fine, but I'm having trouble when I try to connect a windows work station to the non-root bridge via ethernet. I'm getting an IP address from the router attached to the root bridge via DHCP, and I am able to connect to the configuration page of both 1310 APs, but I'm not getting any internet connectivity. Have I misunderstood what 'non-root bridge with wireless clients' means? If not, is there an obvious problem which might cause the wireless clients to work fine, but interfere with a wired client? Thanks.

Thanks Seth,
It's good to know that this is how it is supposed to work. The thing that has me scratching my head is that the wireless clients are working fine from this bridge--it is only the client hooked up to the ethernet interface that is not getting out.
I'll take a look at the gateway settings and see what I can find. I appreciate the tip.

Cannot Associate 1532 Bridges in Non-Root role

Hello,
Can someone please tell me what I am missing and why I cannot bring up 2 bridges in "Root" and "Non-Root" roles?
I have similarly configured bridges in a Root / Non-Root role several times before with older AP's and never had any issues... although it was always just 1 SSID, 1 Vlan, and no subinterfaces...
The only way I was able to get these 2 bridges to associate was to put the Non-Root bridge into a Workgroup Bridge role and then *BANG* everything worked perfectly. I tried getting rid of the authentication and tried using the Parent command but neither helped. Prior to entering Station Role Workgroup Bridge, the only message I would receive was showing on the Non-Root side and all it said was:
*Mar 1 07:27:13.867 GMT: %DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: No Response
*Mar 1 07:27:28.891 GMT: %DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: Rcvd response from 544a.0005.8030 channel 3 2815
What am I missing or what have I incorrectly configured on my Non-Root config?
Bridges are both 1532i with the Autonomous Image 15.2(4)JB5
Attached are the configs prior to changing the Non-Root AP to a station role of Workgroup Bridge.
Thanks!

Hi,
This should work with multiple sub-interfaces.
Few more suggestions
1. Remove this from your BRIDGE SSID & check
mobility network-id 1
This is only require when you configure L3 roaming & WDS in place.
http://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/8103-ap-faq.html
2. Try to set WPA version 2 & only AES encryption.
Also try to Associate your Bridges using Open Auth first (as shown in my blog post initial section) & then try to add security.
HTH
Rasika
**** Pls rate all useful responses ****

Can a wireless router (station role non-root) associate to 2 APs ?

Similar Messages

Maybe you are looking for