Cisco 1142 AP as a repeater

Hi,
I am a bit confused with the GUI configuration of an AP and repeater my concerns are:
I have 3 AP 1142 series i want two APs to be connected to the main AP(ethernet) while the others act as repeaters.
How do i go about creating an AP as  a repeater to assoicate with the AP connected to a switch
Thanks

Hello Samson,
As per your query i can suggest you the following solution-
Configuring a Repeater Using the CLI
If you want to configure your AP as a repeater and use the command-line interface, the following is an example configuration setting. This example configures the AP with two parents:
ap1130# configure terminal
ap1130(config)# interface dot11radio 0
ap1130(config-if)# ssid qbranch
ap1130(config-ssid)# infrastructure-ssid
ap1130(config-ssid)# exit
ap1130(config-if)# station-role repeater
ap1130(config-if)# dot11 extensions aironet
ap1130(config-if)# parent 1 0012.7fc2.1bdc 1000
ap1130(config-if)# parent 2 0012.44b4.b250 1000
ap1130(config-if)# end
ao1130# copy running-config startup-config
Hope this will help you.

Similar Messages

  • Cisco 1142 WAP Connection Help

    We have a Cisco 1142 WAP connected to a Cisco Wireless Controller in a remote office area.  For meetings we wanted to have more hard wired connections in addition to Wifi access for attendee's / presentors etc..My question is if we purchased a Cisco 8 port POE mini switch and put that in the middle between the WAP and Controller would that work?  Or is there another business grade solution for a mix of Ethernet ports and Wifi?

    Yes, sir.  This will work.  The only "problem" I see is your 8 port PoE switch.  Let me explain:
    The good part about Cisco's 8-port PoE switches, the WS-C3560-8PC, is that it is FANLESS.  So even if you stick the switch right inside this conference or meeting room, no one will notice it's there (unless of course, one steps on the hot surface or gives the appliance a good kick).
    This model has a 1Gig SFP or RJ45 port uplink.
    Now the downside is not really that significant, unless you want to be pedantic about it.  The access ports are all 10/100BaseTX only.  
    By the way, I have no way of testing the "compact" series of the 2960C and the 3560C.  The Data Sheet itself is a bit "grey" so I won't make a comment about these two models.

  • Cisco 1142 Wireless access point intermittently will not authenticate

    Hi all,
    We have a Cisco 1142 standalone access point, and from time to time I will come into the office and it will not authenticate any users to either our guest or corporate networks. I then have to go in and reboot the access point. After that, it begins to work. Any advice? Here's my configuration below:
    Current configuration : 6450 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname cisco-chiap01
    logging monitor errors
    enable secret 5 $1$fsD8$CU42/3/Up5AAlL4hQWvvg0
    aaa new-model
    aaa group server radius rad_eap
     server 172.17.16.12 auth-port 1645 acct-port 1646
     server 172.17.21.10 auth-port 1812 acct-port 1813
    aaa group server radius rad_mac
    aaa group server radius rad_acct
    aaa group server radius rad_admin
    aaa group server tacacs+ tac_admin
    aaa group server radius rad_pmip
    aaa group server radius dummy
     server 172.17.21.10 auth-port 1812 acct-port 1813
    aaa group server radius rad_eap2
     server 172.17.16.12 auth-port 1645 acct-port 1646
     server 172.17.21.10 auth-port 1812 acct-port 1813
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authentication login eap_methods2 group rad_eap2
    aaa authorization exec default local 
    aaa accounting network acct_methods start-stop group rad_acct
    aaa session-id common
    login on-failure log
    login on-success log
    dot11 syslog
    dot11 vlan-name Admin vlan 100
    dot11 vlan-name DevNetwork vlan 20
    dot11 vlan-name Guest vlan 150
    dot11 vlan-name Network vlan 16
    dot11 ssid DevNetwork
       vlan 20
       authentication open eap eap_methods2 
       authentication network-eap eap_methods2 
       authentication key-management wpa version 2
    dot11 ssid Guest
       vlan 150
       authentication open 
       authentication key-management wpa version 2
       guest-mode
       mbssid guest-mode
       wpa-psk ascii 7 142407060101380B013A3A2670435642
       information-element ssidl advertisement
    dot11 ssid Network
       vlan 16
       authentication open eap eap_methods2 
       authentication network-eap eap_methods2 
       authentication key-management wpa version 2
    username monkeyman privilege 15 secret 5 $1$ZZ7C$rqimu2FNONdfeacMNGAD/.
    bridge irb
    interface Dot11Radio0
     no ip address
     ip helper-address 172.17.19.10
     no ip route-cache
     encryption mode ciphers aes-ccm 
     encryption vlan 16 mode ciphers aes-ccm 
     encryption vlan 150 mode ciphers aes-ccm 
     encryption vlan 20 mode ciphers aes-ccm 
     ssid DevNetwork
     ssid Guest
     ssid Network
     antenna gain 0
     parent timeout 120
     speed  5.5 11.0 basic-6.0 9.0 12.0 36.0 48.0 54.0
     packet retries 128 drop-packet
     channel 2462
     station-role root
     rts threshold 512
     rts retries 128
    interface Dot11Radio0.11
     encapsulation dot1Q 11
     no ip route-cache
    interface Dot11Radio0.16
     encapsulation dot1Q 16 native
     no ip route-cache
     bridge-group 1
     bridge-group 1 subscriber-loop-control
     bridge-group 1 block-unknown-source
     no bridge-group 1 source-learning
     no bridge-group 1 unicast-flooding
     bridge-group 1 spanning-disabled
    interface Dot11Radio0.20
     encapsulation dot1Q 20
     no ip route-cache
     bridge-group 20
     bridge-group 20 subscriber-loop-control
     bridge-group 20 block-unknown-source
     no bridge-group 20 source-learning
     no bridge-group 20 unicast-flooding
     bridge-group 20 spanning-disabled
    interface Dot11Radio0.150
     encapsulation dot1Q 150
     no ip route-cache
     bridge-group 150
     bridge-group 150 subscriber-loop-control
     bridge-group 150 block-unknown-source
     no bridge-group 150 source-learning
     no bridge-group 150 unicast-flooding
     bridge-group 150 spanning-disabled
    interface Dot11Radio1
     no ip address
     ip helper-address 172.17.19.10
     no ip route-cache
     encryption vlan 16 mode ciphers aes-ccm 
     encryption vlan 150 mode ciphers aes-ccm 
     encryption vlan 20 mode ciphers aes-ccm 
     ssid DevNetwork
     ssid Guest
     ssid Network
     antenna gain 0
     traffic-metrics aggregate-report
     dfs band 3 block
     mbssid
     parent timeout 120
     speed  6.0 12.0 basic-24.0 36.0 48.0 54.0
     channel width 40-above
     channel dfs
     station-role root access-point
    interface Dot11Radio1.11
     encapsulation dot1Q 11
     no ip route-cache
    interface Dot11Radio1.16
     encapsulation dot1Q 16 native
     no ip route-cache
     bridge-group 1
     bridge-group 1 subscriber-loop-control
     bridge-group 1 block-unknown-source
     no bridge-group 1 source-learning
     no bridge-group 1 unicast-flooding
     bridge-group 1 spanning-disabled
    interface Dot11Radio1.20
     encapsulation dot1Q 20
     no ip route-cache
     bridge-group 20
     bridge-group 20 subscriber-loop-control
     bridge-group 20 block-unknown-source
     no bridge-group 20 source-learning
     no bridge-group 20 unicast-flooding
     bridge-group 20 spanning-disabled
    interface Dot11Radio1.150
     encapsulation dot1Q 150
     no ip route-cache
     bridge-group 150
     bridge-group 150 subscriber-loop-control
     bridge-group 150 block-unknown-source
     no bridge-group 150 source-learning
     no bridge-group 150 unicast-flooding
     bridge-group 150 spanning-disabled
    interface GigabitEthernet0
     no ip address
     no ip route-cache
     duplex auto
     speed auto
     no keepalive
    interface GigabitEthernet0.11
     encapsulation dot1Q 11
     no ip route-cache
    interface GigabitEthernet0.16
     encapsulation dot1Q 16 native
     no ip route-cache
     bridge-group 1
     no bridge-group 1 source-learning
     bridge-group 1 spanning-disabled
    interface GigabitEthernet0.20
     encapsulation dot1Q 20
     no ip route-cache
     bridge-group 20
     no bridge-group 20 source-learning
     bridge-group 20 spanning-disabled
    interface GigabitEthernet0.100
     encapsulation dot1Q 100
     ip address 192.168.100.3 255.255.255.0
     no ip route-cache
     bridge-group 100
     no bridge-group 100 source-learning
     bridge-group 100 spanning-disabled
    interface GigabitEthernet0.150
     encapsulation dot1Q 150
     no ip route-cache
     bridge-group 150
     no bridge-group 150 source-learning
     bridge-group 150 spanning-disabled
    interface BVI1
     ip address 172.17.16.251 255.255.255.0
     no ip route-cache
    ip http server
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip radius source-interface GigabitEthernet0 
    access-list 1 permit 172.17.16.1
    access-list 1 remark Admin network access
    access-list 1 permit 192.168.100.0 0.0.0.255
    radius-server attribute 32 include-in-access-req format %h
    radius-server host 172.17.21.10 auth-port 1812 acct-port 1813 key 7 047958071C3561410D4A44
    radius-server host 172.17.16.12 auth-port 1645 acct-port 1646 key 7 08045E471A48574446
    radius-server host 172.17.21.10 auth-port 1645 acct-port 1646 key 7 1320051B185D56797F
    radius-server timeout 15
    radius-server vsa send accounting
    bridge 1 route ip
    line con 0
    line vty 0 4
     access-class 1 in
    end

    When the issue occurs does that affect both 2.4GHz & 5GHz devices ? I would see which band operating devices affected.
    I noticed you have set CH11 under Radio 0 statically.  I would prefer to configure it as below so AP can change the channel depend on the environment.
    int d0
    channel least-congested
    HTH
    Rasika
    **** Pls rate all useful responses ****

  • Wireless non-cisco router with aironet 1242 repeater.

    Hello everyone. I'm a newbie here. I just started learning about cisco devices. Sorry if my question seems stupid.
    I have a problem. A friend gave me an AP aironet 1242 and he wants to use it as a repeater for his wireless non cisco router.
    Is this possible? And if it is how can i do it with simple steps.
    Thanks in advance!

    Thanks for the quick response Scott. I 've read this quide before i post.
    The problem is that i can't connect with serial to the ap. So i can't use commands.
    I can connect with ethernet and see the ap interface. When i go and make the radio0 work as a repeater it shows interface down. What i want is simple steps of how to configure it from the interface.
    Sorry again.

  • Cisco 1142 - DotRadio0 resets

    I have a Cisco Aironet 1142 that keeps having issues with DotRadio0 going to a reset state. If I reload it seems to function for awhile and then it happens again shortly there after.
    Apr 17 18:08:24.619: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    Apr 17 18:08:25.619: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    ap#  show int desc
    Interface                      Status         Protocol Description
    BV1                            up             up      
    Do0                            reset          down    
    Do0.651                      reset          down    
    Do0.653                      reset          down    
    Do1                            up             up      
    Do1.651                      up             up      
    Do1.653                      up             up      
    Gi0                             up             up      
    Gi0.604                        up             up      
    Gi0.651                        up             up      
    Gi0.653                        up             up      
    ap# show version
    Cisco IOS Software, C1140 Software (C1140-K9W7-M), Version 12.4(21a)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 16-Sep-09 18:09 by prod_rel_team
    ROM: Bootstrap program is C1140 boot loader
    BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(23c)JA3, RELEASE SOFTWARE (fc1)
    ap uptime is 18 minutes
    System returned to ROM by reload
    System restarted at 14:15:15 -0400 Wed Apr 17 2013
    System image file is "flash:/c1140-k9w7-mx.124-21a.JA1/c1140-k9w7-mx.124-21a.JA1"

    I believe the RF is good we have 8 access points through out the building and normally dont have any issues with connectivity. We have not done a site survey yet so that is probaby something we should look into next. Below is the current configuration. To reinterate the AP functions good for awhile and then resets. Upon a reload it works again fine for awhile and resets. I have 4 AP's that are doing the same thing and are placed in various points around the building. 
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname xxxxxxxx
    aaa new-model
    aaa group server radius rad_eap
    server 10.38.10.33 auth-port 1645 acct-port 1646
    server 10.38.10.34 auth-port 1645 acct-port 1646
    aaa group server radius rad_mac
    server 10.38.10.33 auth-port 1645 acct-port 1646
    server 10.38.10.34 auth-port 1645 acct-port 1646
    aaa group server radius rad_acct
    server 10.38.10.33 auth-port 1645 acct-port 1646
    server 10.38.10.34 auth-port 1645 acct-port 1646
    aaa group server radius rad_admin
    server 10.38.10.33 auth-port 1645 acct-port 1646
    server 10.38.10.34 auth-port 1645 acct-port 1646
    aaa group server tacacs+ tac_admin
    aaa group server radius rad_pmip
    aaa group server radius dummy
    aaa authentication login default local
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authorization exec default local
    aaa accounting network acct_methods start-stop group rad_acct
    aaa session-id common
    clock timezone -0500 -5
    clock summer-time -0400 recurring
    ip domain name panther.com
    ip name-server 10.38.10.33
    ip name-server 10.38.10.34
    dot11 syslog
    dot11 vlan-name VLAN604 vlan 604
    dot11 vlan-name VLAN651 vlan 651
    dot11 vlan-name VLAN653 vlan 653
    dot11 ssid PanGuest
       vlan 653
       authentication open
       mbssid guest-mode
    dot11 ssid PanWifi
       vlan 651
       authentication open eap eap_methods
       authentication key-management wpa version 2
       accounting acct_methods
       mbssid guest-mode
    username xxxxxxx privilege 15 password 7 xxxxxxxxxxxx
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 651 mode ciphers aes-ccm
    encryption vlan 653 key 1 size 40bit 7 xxxxxxxxxxx transmit-key
    encryption vlan 653 mode ciphers wep40
    ssid PanGuest
    ssid PanWifi
    antenna gain 0
    mbssid
    channel width 40-above
    station-role root
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.651
    encapsulation dot1Q 651
    no ip route-cache
    bridge-group 255
    bridge-group 255 subscriber-loop-control
    bridge-group 255 block-unknown-source
    no bridge-group 255 source-learning
    no bridge-group 255 unicast-flooding
    bridge-group 255 spanning-disabled
    interface Dot11Radio0.653
    encapsulation dot1Q 653
    no ip route-cache
    bridge-group 254
    bridge-group 254 subscriber-loop-control
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    encryption vlan 651 mode ciphers aes-ccm
    encryption vlan 653 key 1 size 40bit 7 xxxxxxxxxxx transmit-key
    encryption vlan 653 mode ciphers wep40
    ssid PanGuest
    ssid PanWifi
    antenna gain 0
    no dfs band block
    mbssid
    channel width 40-above
    channel dfs
    station-role root
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1.651
    encapsulation dot1Q 651
    no ip route-cache
    bridge-group 255
    bridge-group 255 subscriber-loop-control
    bridge-group 255 block-unknown-source
    no bridge-group 255 source-learning
    no bridge-group 255 unicast-flooding
    bridge-group 255 spanning-disabled
    interface Dot11Radio1.653
    encapsulation dot1Q 653
    no ip route-cache
    bridge-group 254
    bridge-group 254 subscriber-loop-control
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface GigabitEthernet0
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    no keepalive
    interface GigabitEthernet0.604
    encapsulation dot1Q 604 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0.651
    encapsulation dot1Q 651
    no ip route-cache
    bridge-group 255
    no bridge-group 255 source-learning
    bridge-group 255 spanning-disabled
    interface GigabitEthernet0.653
    encapsulation dot1Q 653
    no ip route-cache
    bridge-group 254
    no bridge-group 254 source-learning
    bridge-group 254 spanning-disabled
    interface BVI1
    ip address 10.38.4.18 255.255.255.0
    no ip route-cache
    ip default-gateway 10.38.4.1
    ip http server
    ip http authentication aaa
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip radius source-interface BVI1
    access-list 111 permit tcp any any neq telnet
    radius-server attribute 32 include-in-access-req format %h
    radius-server host 10.38.10.33 auth-port 1645 acct-port 1646 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    radius-server host 10.38.10.34 auth-port 1645 acct-port 1646 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    radius-server deadtime 60
    radius-server vsa send accounting
    bridge 1 route ip
    line con 0
    access-class 111 in
    line vty 0 4
    access-class 111 in
    transport input ssh
    sntp server 10.38.4.1
    sntp broadcast client
    end

  • Cisco 1142 WGB in a controller based network

    Hi,
    I have trouble with Cisco AP1142 which is configured in WGB mode. I'm trying to get it work in a controller based network, where LAPs are configured in H-REAP. SSID where WGB should be associated drops it traffic to VLAN60. Security type is WPA2-PSK.
    I've configured the WGB and it associates and gets IP from the correct network....but the problem is that laptop connected to WGB won't work. It gets no IP address and won't work with static IP.
    At the moment I have no VLANs configured on the WGB - should I have?
    AP IOS version is 12.4(25d)JA and WLC version is 7.0.98.0.
    Please find config file attached and also a topology image. Hope these help.
    Br,
    Petri

    Hi Petri,
    WGB mode with HREAP is not supported:
    http://tools.cisco.com/squish/dcAfC
    http://tools.cisco.com/squish/CcFE6
    You may want to test this with uWGB mode and static IP config.However, there is a new bug filed for uWGB mode as well:
    CSCtl21683    uWGB needs official testing and support with h-reap
    HTH,
    Alex

  • Require help to configure Cisco 1142 AP

    Hi Team,
                     I'm new to Wireless. Recently I've configured a Wireless AP (Model:AIR-AP1142N-A-K9) with the help of a Youtube Video.
    Please find the Below configuration details:
    AP Configuration:
    <REMOVED>#show run
    Building configuration...
    Current configuration : 4955 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname <REMOVED>
    enable secret 5 $1$nyT5$7naR21WqmWcPukAhSssAo/
    no aaa new-model
    ip domain name <REMOVED>
    dot11 syslog
    dot11 vlan-name MGMT_VLAN vlan 20
    dot11 vlan-name WIRELESS_LAN vlan 30
    dot11 ssid <REMOVED>
       vlan 30
       authentication open
       guest-mode
    crypto pki trustpoint TP-self-signed-<removed>
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-<removed>
    revocation-check none
    rsakeypair TP-self-signed-<removed>
    crypto pki certificate chain TP-self-signed-<removed>
    certificate self-signed 01
    <removed>
    quit
    username <REMOVED> privilege 15 password 7 01100F175804
    username <REMOVED> Privilege 15 secret 5 $1$Jeq0$SxvYfrDZkWNx5N3XITAab0
    username <REMOVED> privilege 15 secret 5 $1$e9Mc$JwGalVaHjrFf4Gn4kj/VY1
    username <REMOVED> privilege 0 secret 5 $1$0eRJ$OzYn1oU.1W8aDOVi27Fbt0
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption mode ciphers aes-ccm
    encryption vlan 30 key 1 size 40bit 7 <REMOVED> transmit-key
    encryption vlan 30 mode wep mandatory
    ssid <REMOVED>
    antenna gain 0
    channel 2412
    station-role root
    interface Dot11Radio0.20
    encapsulation dot1Q 20 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    antenna gain 0
    dfs band 3 block
    channel dfs
    station-role root
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    no keepalive
    interface GigabitEthernet0.20
    encapsulation dot1Q 20 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0.30
    encapsulation dot1Q 30
    ip helper-address 192.168.30.1
    no ip route-cache
    bridge-group 30
    no bridge-group 30 source-learning
    bridge-group 30 spanning-disabled
    interface BVI1
    description <<< LAN INTERFACE >>>
    ip address 192.168.20.202 255.255.255.0
    no ip route-cache
    ip default-gateway 192.168.20.2
    no ip http server
    ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    access-list 115 remark <<< ACL-FOR-SSH-ACCESS >>>
    access-list 115 permit tcp host 192.168.20.190 any eq 22
    access-list 115 permit tcp host 192.168.20.191 any eq 22
    access-list 115 permit tcp host 192.168.20.192 any eq 22
    access-list 115 permit tcp host 192.168.20.193 any eq 22
    access-list 115 permit tcp host 192.168.20.194 any eq 22
    access-list 115 permit tcp host 192.168.20.195 any eq 22
    access-list 115 deny   tcp any any
    bridge 1 route ip
    line con 0
    login local
    stopbits 1
    line vty 0 4
    access-class 115 in
    exec-timeout 5 0
    login local
    transport input ssh
    transport output none
    line vty 5 15
    access-class 115 in
    login local
    transport input ssh
    transport output none
    end
    Access Switch Configuration :
    <REMOVED>#show run int gig 1/0/1
    Building configuration...
    Current configuration : 129 bytes
    interface GigabitEthernet1/0/1
    description ** Trunk to GF-AP1 **
    switchport trunk native vlan 20
    switchport mode trunk
    end
    Core Switch side Configuration:
    ip dhcp excluded-address 192.168.30.1 192.168.30.10
    ip dhcp pool WIRELESS_SCOPE
    network 192.168.30.0 255.255.255.0
    default-router 192.168.30.1
    dns-server 192.168.20.66
    With the above configuration the AP is working fine and it's getting DHCP ip address from the Core switch and the users are also able to access all the internal network resources and Internet too according to customer requirement.
    But recently customer raised few concerns:
    1. Customer is unable to login into AP by using WEBBROWSER
        (error: The Server 192.168.20.202:443 requires a username and password. The server says: Lever_15_access.)
        SSH to the AP is working fine.
    2. Customer is asking to create 2 SSIDs in every access point.
          a.) COMPANY SSID (Which should have full access to the local network as well as Internet too.)
          b.) GUEST       SSID (Which should only access internet but not internal network.)
    3. Only few users should be able to access GUI of AP as I've done for SSH using ACL's
    Kindly help with the above concerns as I've to answer the customer tomorrow.
    Regards,
    Vamsi Harish.T.
    [email protected]

    Hi,
    Same local credentials that you use for SSH can be used for http/https.
    Make sure you provide correct credentials. If still not working provide a screenshot of the error and try to enable http server for testing purposes only and try if it works with http.
    For multiple SSIDs with multiple VLANs try this config example:
    https://supportforums.cisco.com/docs/DOC-14496
    HTH
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • WCS v7.0.164.0 + Cisco 1142 LWAP AP's

    I have deployed a number of AIR-LAP1142N-E-K9 access points at a site, but I have an issue where all access point have defaulted to Channel 1.  I have set the perameters on the Lightweight AP Template correctly to allow dinamic power and channel selection.  The positioning of the AP's are as per the WCS planning tool.  Any help would be welcome.....

    It's also possible DCA is disabled on the WLC, check it under:
    802.11a > RRM > Dynamic Channel Assignment (DCA)
    Also check your power:
    802.11a > RRM > Tx Power Control(TPC)
    Nabil

  • Cisco 521 AP as Repeater??

    Can I use Cisco 521 AP as a repeater to another Cisco 521 AP that is working as a root?

    Hello Samson,
    As per your query i can suggest you the following solution-
    Configuring a Repeater Using the CLI
    If you want to configure your AP as a repeater and use the command-line interface, the following is an example configuration setting. This example configures the AP with two parents:
    ap1130# configure terminal
    ap1130(config)# interface dot11radio 0
    ap1130(config-if)# ssid qbranch
    ap1130(config-ssid)# infrastructure-ssid
    ap1130(config-ssid)# exit
    ap1130(config-if)# station-role repeater
    ap1130(config-if)# dot11 extensions aironet
    ap1130(config-if)# parent 1 0012.7fc2.1bdc 1000
    ap1130(config-if)# parent 2 0012.44b4.b250 1000
    ap1130(config-if)# end
    ao1130# copy running-config startup-config
    Hope this will help you.

  • Cisco 2504 Domain Authentication for WIFI Clients

    I got a question.
    I have a 2504 controller, and a bunch of 3600 APs. (which now works, thanks to Scott Fella)
    I want the WIFI users to be able to connect to the WIFI, If their computer is part of the domain. Otherwise, they connect to the guest WIFI.
    How can I go about doing that? I tried searching the forums, but perhaps Im not searching for the right keywords.
    I thought it was LDAP, but I could not find much info on it.
    Thanks....         

    I wouldn't look at LDAP. I would use a radius server and machine authentication. If your a Microsoft shop, then bring up IAS for 2003 or NPS for 2008. These can work as your radius server. To figure out how to configure machine auth, just search Google for NPS wireless machine authentication.
    Here is one link
    http://araihan.wordpress.com/2010/04/30/complete-guide-to-build-a-cisco-wireless-infrastructure-using-cisco-wlc-5500-cisco-1142-ap-and-microsoft-radius-server/
    Sent from Cisco Technical Support iPhone App

  • Cisco 1142AP Autonomous - Radio interface constantly reset and provides crash file

    Hello All,
    We have 10 Cisco 1142 Access Points currently configured as Autonomous and I'm experiecing very unusual behavior with the 2.4GHz radio interfaces on each of them. The IOS firmware is 15.2.2JB and they're connected to Cisco 2960 PoE switches. I'm not sure what could be causing this problem however it is service impacting and looks bad on me since I don't have a solution for it. One potential fix could be to upgrade the firmware to 15.2.4 but I'm sure if it is a firmware problem. Any advice would help. Here's an excerpt from the AP log:
    Aug 18 14:40:16:  Writing driver stats to flash:/ap_log_r0_0.log..
    Aug 18 14:40:21:
    Aug 18 14:40:21: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    Aug 18 14:40:22: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    Aug 18 14:40:23: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    Aug 18 14:40:23: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    Thanks,
    Ali Ibrahim

    You should be able to go in and view teh R0_0.log file.
    there might be something in there that you can do a bug search for.
    HTH,
    Steve

  • How to configure two Cisco WLC-5508-50

    Hi everyone, last year we buy 1 wlc-5508-50 to use with cisco 1142 AP. This year we plan to add more APs and we just buy another WLC-5508-50 because it was cheaper than to buy 50 licences. We would like to know what is the best way to configure our second WLC so that we can distribute our 75 APs on each controller. Maybe someone can help us. Thanks!

    Hi Bernard,
    If you have WCS, you can use templates to synchronize your configurations on the WLCs.
    Another possibility is you can upload your current configuration from your production WLC, and then open up the configuration file and edit the IP addresses to give new addresses to the new WLC. You will also want to change the system name to be unique as well. You can then download this config onto the new WLC, as long as the IP addresses and system name are different it should not interfere with your current WLC.
    To have the WLCs operate together properly, you will want to make sure they are defined in a mobility group, see the following for instructions:
    http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html
    -Patrick Croak
    Wireless TAC

  • Cisco Aironet 3502i and Virtual Wireless Controller- Question

    Hello everyone,
    As soon, I purchased two Cisco 3502i and Cisco 1142 however, two issue are that I don't have controller and smartnet. As my purpose, it using for Home Use but house with 2,500 Sq ft with two floor and new 24x24ft garage with two floor. I put two Cisco 3502i for garage and one cisco 1142 in house on second floor. Separated for multi media, gaming, streaming high resolution video, parts, and downloads programmings online. It will run with Cisco Catalyst Express 500 with 24 ports (4 POE) and two gigabit ports. In house, it have Dell Poweredge 2850, Cisco Catalyst Express 500 with 24 ports POE and 2 ports gigabit.
    I thought to make my own developing with my first time using Wireless Controller. I wanted to try out with Virtual WLC on Dell Poweredge 2850 running ESXi 4.1.
    Specs for Dell Poweredge 2850:
    - 2x Intel Xeon Dual Core 3.8 GHz
    - 4GB RAM (Will upgrade to 12GB soon)
    - 2x 146GB and 2x 36GB SCSI
    - 2x 1 Gbps built in and 4x 1 Gbps PCI-X
    Developing with Untangle and pfSense to make it support with LADP and VLAN to both Cisco Express 500 using 4 gbps PCI-X. I have read the requipment list to use Virtual WLC but it seem met the requipment for my 2850. If someone offer me to get Virtual WLC and IOS from their, I accept to "borrow" it. I do go college which is Rochester Institute of Technology at New York and my major is Applied Computer Technology. I live here at Hampton Road, Virginia. Just in case if you might know about RIT. I just start to learning myself with Cisco books.
    I have a question:
    - Is there possible to get trial or full version of Virtual WLC?
    - Is there possible to get Lightweight or Autonomous IOS for Cisco 1142 and 3502i?
    -  Does it supported Dell PowerEdge 2850?
    - Does 3502i support Autonomous? (Not actually but I have researched around online about that it will work with 1262's IOS)
    Thanks
    Gage

    Answers in-line...
    I have a question:
    - Is there possible to get trial or full version of Virtual WLC?
    No.  You will need a SmartNet contract (or a freshly purchased device) to obtain software from cisco.  Nobody will provide this to you.
    - Is there possible to get Lightweight or Autonomous IOS for Cisco 1142 and 3502i?
    No.  You will need a SmartNet contract (or a freshly purchased device) to obtain software from cisco. 
    Nobody will provide this to you.
    -  Does it supported Dell PowerEdge 2850?
    Cisco doesn't go in to great detail regarding the actual Hardware requirements of the vWLC (as far as ESX Host requirements).  Primarily, making sure you are running ESX 4.x/5.x is necessary.  The vWLC provisions 2Gb of RAM and 8GB of thick provisioned storage, so if your host can accomodate I don't see any reason it wouldn't work.
    - Does 3502i support Autonomous? (Not actually but I have researched around online about that it will work with 1262's IOS)
    Yes, with the latest versions of IOS 15.2(2)JB, full functionality in autonomous can be achieved on the 1550, 3500, and 3600 series APs
    http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/15.2_2_JB.html#wp355587

  • Cisco ACL for Wireless VLAN's

    Hi all and Merry Christmas to you.
    So I have been off work for a few days now playing in my lab, I have configured a number of VLAN’s to separate Data, Voice, Servers, Games Consoles and Guest on my Cisco 1142, I know it may be a bit of an over kill but it’s just me doing a bit of lab work and learning
    What I’m after doing now is setting up ACL’s to deny the Guest and Games Console VLAN from accessing my LAN and I’m not sure where to start, I want to consoles only to be able to connect to PSN and Xbox networks as well as my DHCP server, and the guest network to connect to the web but again not my LAN, this is for users who come round with phones and tablets.
    My lab look like this:-
    Broadband > Cisco RVS4000 (soon to be ASA) > WS-C3560 > 1142 AP.
    My DHCP server is on VLAN 6 with an IP address of 192.168.6.241
    VLANs are: -
    interface Vlan5
    description *****DATA VLAN*****
    ip address 192.168.5.253 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan6
    description *****Servers*****
    ip address 192.168.6.254 255.255.255.240
    interface Vlan7
    description *****VOICE*****
    ip address 192.168.7.254 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan8
    description *****VOICE WIFI*****
    ip address 192.168.8.254 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan9
    description *****WIFI CONSOLES*****
    ip address 192.168.9.254 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan10
    description *****WiFi Home*****
    ip address 192.168.10.254 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan11
    description *****WiFi Guest*****
    ip address 192.168.11.254 255.255.255.240
    ip helper-address 192.168.6.241
    interface Vlan12
    description *****Management*****
    ip address 192.168.12.254 255.255.255.240
    The AP config looks like:
    dot11 ssid Console
       vlan 9
       authentication open
       authentication key-management wpa
       mbssid guest-mode
       wpa-psk ascii 7 094F4107170A051103
    dot11 ssid Home
       vlan 10
       authentication open eap eap_methods
       authentication network-eap eap_methods
       guest-mode
       mbssid guest-mode
    interface Dot11Radio0.9
    encapsulation dot1Q 9
    ip helper-address 192.168.6.241
    no ip route-cache
    bridge-group 9
    bridge-group 9 subscriber-loop-control
    bridge-group 9 block-unknown-source
    no bridge-group 9 source-learning
    no bridge-group 9 unicast-flooding
    bridge-group 9 spanning-disabled
    interface Dot11Radio0.10
    encapsulation dot1Q 10
    ip helper-address 192.168.6.241
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio0.12
    encapsulation dot1Q 12 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    At the minutes I’m just trying to stop Console getting to the Home network before I move onto the rest
    I have not got a clue where to start or where to place the ACL’s, would they be on the Switch or the AP itself?
    Hope you can help me out.
    Happy new year
    Martyn

    Here is a suport document in regards to autonomous ACL:
    https://supportforums.cisco.com/docs/DOC-13768
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • Cisco Wi-Fi location tracking solution

    Hi , i've a customerthat has A.P. Cisco 1142 , 1240, 1242, with a WISM WLC 4400 series and a server with sw WCS.
    He would like to use this infrastructure to implement a solution of Location trcking wth TAG RFID to locate person insde his site for safety reasons.
    What i need to know is:
    - Is  it possible to do what he customer wants with his infrstructure ?
    - Which other components he needs ?
    - Which are  the compatibles TAG RFID that hecanuse withhis infrastructure ?
    - What kind of loction sw he can use or integrae with ?
    Thanks
    Best regards.

    Wi-Fi Location-Based Services 4.1 Design Guide
    http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/wifich3.html?referring_site=bodynav
    Context Aware and Location FAQ
    http://www.cisco.com/en/US/products/ps9806/products_qanda_item09186a0080af9513.shtml
    Cisco Mobility Services Engine - Context Aware Mobility Solution Deployment Guide
    http://www.cisco.com/en/US/products/ps9742/products_tech_note09186a00809d1529.shtml?referring_site=smartnavRD
    Location Appliance to Mobility Services Engine (MSE) and Context-Aware Mobility Service Migration Guide
    http://www.cisco.com/en/US/products/ps9806/products_white_paper09186a0080afd10f.shtml?referring_site=smartnavRD
    http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70ccfg.html#wp1181157
    http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080870349.shtml

Maybe you are looking for