Cisco Aironet 1131G cannot access BVI

I have configure our Cisco Aironet 1131G with Multiple SSID with VLAN's
The Guest VLAN is working well and no problem,
The issue i have is that I cannot connect to the BVI on the Wireless AP, i have setup to VLAN's
2 = LAN & NATIVE VLAN
999 = GUEST VLAN
this is my config
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname NAFTA_AP_003
logging rate-limit console 9
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa group server radius rad_eap2
server 10.1.122.50 auth-port 1645 acct-port 1646
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods2 group rad_eap2
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 mbssid
dot11 syslog
dot11 vlan-name GUEST vlan 999
dot11 vlan-name LAN vlan 2
dot11 ssid Nufarm_EXT
   vlan GUEST
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 053B0918245E6308015546
dot11 ssid Nufarm_INT
   vlan 2
   authentication open eap eap_methods2
   authentication network-eap eap_methods2 mac-address mac_methods
   authentication key-management wpa
username nemesis privilege 15 secret 5 $1$SjHa$TGIGBh.IhLNgflxBreKYf.
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan GUEST mode ciphers aes-ccm tkip
encryption vlan 2 mode ciphers tkip
ssid Nufarm_EXT
ssid Nufarm_INT
channel 2422
station-role root
interface Dot11Radio0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.999
encapsulation dot1Q 999
no ip unreachables
no ip proxy-arp
no ip route-cache
no cdp enable
bridge-group 255
bridge-group 255 subscriber-loop-control
bridge-group 255 block-unknown-source
no bridge-group 255 source-learning
no bridge-group 255 unicast-flooding
bridge-group 255 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.999
encapsulation dot1Q 999
no ip unreachables
no ip route-cache
no cdp enable
bridge-group 255
no bridge-group 255 source-learning
bridge-group 255 spanning-disabled
interface BVI1
ip address 10.1.2.242 255.255.255.0
no ip route-cache
ip default-gateway 10.1.2.254
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.1.122.50 auth-port 1645 acct-port 1646 key 7 03516213160B73435E0C2D16110504
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end

Ah, yeah that would do it, makes the swich want the VLAN to be tagged. Nice catch on that!
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

Similar Messages

Beginner Needs Help with Aironet 1131G Wireless Access Point

I have a new Cisco Aironet 1131G Wireless Access point. It is picking up an IP address and I can ping that address. However, I can't access it via the web-based GUI or the CLI. I have preformed the reset. Any suggestions would be greatly appreciated.
Thanks.

Hi,
I cannot access means what?? are you not able to go to CONFIG T prompt from CLI?? and if you are in the same subnet as that of the AP, are you not able to open up the GUI?? if you are not able to then, issue the command "show version" on the AP CLI and see if your image is "RCVKW8" image. if so u need to convert the same to IOS using the below method..
http://www.cisco.com/en/US/docs/wireless/access_point/12.4_21a_JA1/configuration/guide/scg12421aJA1-chap22-trouble.html#wp1038660
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

Does Cisco Aironet 1131G really support EAP-SIM ?

Hello!
I have tried to configure EAP-SIM authentication on Cisco Aironet 1131G for Wi-Fi Offload but unfortunately I couldnt make it work. As far as I understand the Wi-Fi standard it is fully supported in 802.11n within WPA2-Enterprise standard. I have read Cisco datasheet for 1131G where your are claiming that you support EAP-SIM in WPA2 also. I have tried to configure it according to configuration guide but it always requires to enter password key first when I try to connect to SSID with configured WPA2 and EAP-SIM. Can you please provide us with additional info how to properly configure AP or confirm that EAP-SIM needed for seamless 3G/Wi-Fi authentication is supported only within WPA2-Enterprise.
BR,
Denys

Yes EAP-SIM is supported by Cisco Aironet 1131G. For more detail about this product you can go to below link.
http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6087/product_data_sheet0900aecd801b9058.htmlhttp://

Aironet 1300 cannot access by iphone

I use the aironet 1300. In windows perform it can detected the sid and applied the ip but when i use apple iphone it just detected the sid but cannot apply ip. so how can i do.

Hello,
i'm a french user of behance, on i've got the same problem as Sarah; i can connect on my account on internet but with my iphone it
doesn't work. I delete then reinstall the app and restart the phone, but it is the same. I recieve popup from beahnce on the phone as if i'm connected, but i cannot
access on the app....
Thank you very much for your answer

Cisco 1262 AP cannot access via cosole and GUI

Hi,
I have a Cisco AIR-LAP1262N-E-9 but I cannot access via console and GUI. Also, I noticed that after getting IP address from DHCP server, its IP address will be released after 2minutes. Then after a while, the access point will get another new IP address. And this happens repeatedly.
Hoping for some help out there...
Thanks,
shawn

Hi Manas,
Thanks for your comments.
I have a WLC 5508 controller. I just want to have a basic setup for my upcoming project implementation. On my test bed, I have WLC, 2 sets of AP, and PoE L3 switch. The L3 switch serves as a DHCP server to APs. I manually set the Management Interface IP address of WLC in the same VLAN of the DHCP scope for AP just for basic connectivity. Upon powering up the APs, the WLC detected the APs. However, after 2-3 minutes, the WLC cannot detect anymore the APs. I also notice that the APs are getting their IP address to DHCP server but it will release after sometime..may about 3minutes. Then the APs will get again IP address and will release it. And this happens continuously. I just wish to hard code the IP settings to APs via console but I cannot access it.
Hoping for your help and thanks in advance.
Regards,
Shawn

Configuration of cisco aironet 1260 series access point..??

i hv a cisco aironet 1262n access point and a normal router(without wlan) with a broadband connection
now i want to use my access point as a wifi hotspot
but i am not able to access it, through web browser
i dont know how i connect wires so that i am able to access " AP access page" and also i forgot its IP address too so can u pls tell me how do i reset it to default

Your AP is most likely loaded with a controller-based IOS. You can easily convert this to autonomous IOS.
Read this: Using a TFTP Server to Return to a Previous Release

Cisco aironet 1200 Series access point dropping clients

We are having an issue where our Cisco Aironet 1220 Series AP is constantly dropping clients. We have 3 APs mounted on a single tower, all out of each others range and freq. There are approximatly 30 clients on each AP. We are noticing an increase in dropped customers (up to 20 at a time). ANy suggestions? This only became an issue in the last few weeks, and nothing major has changed.

Hi
Even I was facing almost the same kind of problem. But in my case it was wired clients to the workgroup bridge 350.
I had done lot of testings and reading at that time to resolve this problem.
However in your case I feel your problem can be resolved by keeping the option "Reliable multicast for Workgroup bridges" disabled in the APs under dot11radio interface settings. This is possibly because the radios cannot associate to more than 20 clients at a time if the option is in the enable mode.
You need to keep this option enabled in a root bridge when you have problems of dropping the wired clients to the workgroup bridge.
By keeping this option enabled, you are actually asking the Root bridges to consider the Workgroup bridges as Infrastructure devices and not as clients thereby making the roots to send all the multicasts to the WGBs. However in that case it losses the efficiency of associating more than 20 clients.
Let me know if this resolves your problem.
Regards

Cisco aironet 1310 Outdoor access point

I am looking at outdoor access points, I want to stick with Cisco aironet, we currently have 6 of them that are 6 years old and running great, one has had a problem because of humidity, dried it out and relocated and we are good again.
I was looking at the Aironet 1310 Outdoor access point, but I can't find much information on it. I am looking to see how many SSIDs can be setup, we currently have 2 one private, and one public, this is done with VLANS. I am also looking at finding out about the power injector, it converts to coaxial cable, it has 2 RJ-45 and 2 Coaxial, does this mean if we get 2 access points, then I only need 1 power injector?
Thanks for any help you can give.

Rusty:
AP supports up to 16 SSIDs to be configured.
Multiple SSIDs with VLANs configuration is done almost the same way you do with current Aironet APs.
see here: http://tiny.cc/0qwnkw
You also need one power injector per AP. Each AP should use it's own power injector.
The two coaxial output in the power injector both are used to be connected to the AP (see below image).
The RJ-45 connectors in the power injector one of them is for Console connectivity and the other for network ethernet connectivity.
Check here: http://tiny.cc/7gxnkw
HTH
Amjad
Rating useful replies is more useful than saying "Thank you"

Image Recovery for Cisco Aironet 1300 Outdoor Access Point

We purchased two 1300 APs for outside. There is a new release for the image that we wanted to use so, we have the latest security updates. We downloaded, logged onto the access point just fine, but the image never took. After four hours with a direct connection, it was still going and this morning we came in and it just keep rebooting. Our network guy states it looks like a corrupt image. We can barely do anything and since there is no "mode" button like the earlier models, I have not found anything on web sites or forums to help us reload a good image to the access point. I would appreciate any insight someone has and/or where to look for this. I logged on and downloaded about every manual on the 1300 I could find, but have not found a good way to fix this. Not even the upgrade tool will connect since it just keeps rebooting.

Hi Bruce,
Because (as you correctly noted) the 1300 does not have a mode button you could try this method;
Complete the steps in this section in order to reset Cisco IOS Software-based bridges:
If the privileged command prompt ap# is available in the CLI, the write erase command and the reload command erase the startup configuration and reset the unit.
If the GUI is available, choose System Software > System Configuration. Press the Reset to Defaults button.
Aironet 1300 Series Bridges do not have a MODE button to reset the AP to factory defaults. So, if neither the GUI or CLI is available with sufficient privileges, complete these steps to delete the current configuration and return the entire bridge settings to the factory defaults using the CLI.
Open the CLI with a Telnet session or a connection to the bridge console port.
Reboot the bridge by removing and reapplying power.
Allow the bridge to boot until the command prompt appears and the bridge begins to inflate the image.
Press ESC when you see lines that are similar to these on the CLI:
Loading "flash:/c1310-k9kw-7mx.v122_15_ja.200040314-k9w7-mx.v122_15_ja.20040314"
...#############################################################################Note: In order to access the boot loader, you must press ESC twice. But this action depends on the terminal-emulation software that you use.
Messages that are similar to these appear:
Error loading "flash:/c1310-k9kw-7mx.v122_15_ja.200040314-k9w7-mx.v122_15_
ja.20040314"
Interrupt within 5 seconds to abort boot process.
Boot process terminated.
The system is unable to boot automatically. The BOOT environment variable needs to
be set to a bootable image.
C1310 Boot Loader (C1310-BOOT-M), Version 12.2 [BLD-v122_15-ja_throttle.20040314 100]
bridge:At the bridge: prompt, issue the dir flash: command in order to view a directory of the Flash file system.
The directory is similar to this directory:
bridge: dir flash:
Directory of flash:/
2 -rwx 0 env_vars
5 drwx 384 C1310-k9w7-mx.v133_15_JA.20040314
3 -rwx 1128 config.txt
4 -rwx 5 private-config
3693568 bytes available (4047872 bytes used)
bridge:Delete or rename the files config.txt and env_vars, and reboot the bridge.
Note: Do not forget the / character before the filenames.
bridge: delete flash:config.txt
Are you sure you want to delete flash:/config.txt (y/n)?y
File "flash:/config.txt" deleted
bridge: delete flash:/env_vars
Are you sure you want to delete "flash:/env_vars" (y/n)?y
File "flash:/env_vars" deletedIssue the boot command in order to reboot the bridge at the bridge: prompt, or simply power cycle the bridge.
After the bridge reboots, reconfigure the bridge with the web browser interface, the Telnet interface, or Cisco IOS Software commands.
Note: The bridge is configured with the factory default values that include:
The IP address, which is set to receive an IP address with DHCP. If you do not have a DHCP server, you can access the bridge using the default IP address of 10.0.0.1 using HTTP/HTTPS or Telnet. Once you gain access to the bridge via Telnet or GUI, you can modify the IP address of the bridge.
Note: This default IP address of 10.0.0.1 becomes available only for a short period. So, make sure that you assign your own IP address to the bridge within that period of time.
The default username and password, "Cisco".
From this doc;
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#ca_1310_ser
One other thing, be careful with the new IOS that you aren't loading a LWAPP Recovery Image. (it almost sounds like what may have happened)
Hope this helps!
Rob

Cisco Aironet 1240 AG Access Point - configure Mac Address using Telnet

Hi there,
IÂve got a problem hopefully someone can help me with. I have the above mentioned AP and it is configured, working well and providing wireless access to several laptops on our domain.
The thing is I canÂt get access to the web-based interface to add new laptops Mac addresses to the AP as I currently have them secured with local list Mac address authentication but my user name and password when entered in the web browser login dialog box wonÂt allow me in although strangely it does allow me to login using the same credentials when I telnet into the AP.
Does anyone know why I canÂt get logged in using the web interface even though the user name and password does appear to be correct as I can telnet in? Also if you have any suggestions how I could sort this without having to perform the password recovery procedure, as I donÂt want all the config on the AP wiped and want to avoid having the set the whole thing up again.
As I workaround if anyone knows what the commands are to allow me to add the Mac addresses of the new laptops so they are added to the local list Mac address authentication list so the new laptops are secured that would be great.
Thanks in anticipation,
Tony

Your AP is probably configured to use the enable secret as the password. Try entering nothing for the username, and enter your enable secret for the password ('Cisco' by default).
If that doesn't work, post your running-config and we'll be able to see why it's doing that. It's a standard configuration, and no worries because wiping the AP won't be necessary since you can successfully Telnet in.
Jeff

Cisco Aironet 1100 series wireless access point software update!

Hi,
I have a wireless network using 2 cisco aironet 1100 series access points.
From time to time I have problems with connecting a device (Laptop,PC,)to the wireless network.There are onther wireless netwotk that operate around and might be using the same channel.Someone else created the wireless network and I do not know how to access it now to check the configurations on change something.
I cannot conncet my iPhone to the network and I beleive that a software update might solve the problem but I do not know how to do it and where to download it from.
1. How can I update the software and where from?
2.How can I ensure that thare are no interferences and conflicts?
3.How can I ensure that no onther wireless network around is using the same channel?
Thank you in advance.

Sounds good to me. Are you having problems?
Please remeber to rate all replies

Cisco Aironet 1700 access-point?

Earlier this month Cisco released a new autonomous IOS for the 2700 and 3700 access-points. If I look at the release logs, they reference to a new 1700I access-point:
Support for Cisco Aironet 1700 Series access point
- This access point is built on 3x3:2(2.4GHz), 3x3:2(5GHz) MIMO technology, and comes with integrated antennas, and supports 802.11a,b,g,n,ac. This access point has both primary and secondary gigabit Ethernet ports. The primary port is gigabit Ethernet 0 and is the backhaul port. The primary port can be set as trunk port. The secondary port is gigabit Ethernet 1, and is the access port. You can configure the secondary port to a VLAN ID using the interface configuration command bridge multiple-port client-vlan vlan-id
- Supported model is 1700I
(http://www.cisco.com/c/en/us/td/docs/wireless/access_point/ios/release/notes/rn-15-3-3.html)
Has anyone of you guys have some inside information about this new access-point? :-) My guess is that it is gonna be the successor for the 1600I, so the same price but 802.11ac and CleanAir Express (?)

yes. It looks like 8.0.100.0 code introduced this new AP model support for AireOS controllers.
http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
HTH
Rasika

Cisco Aironet 1300 Series Power

Can the 1310ap receive it's power from a POE switch?

Hi Edward,
Sadly the 1310 cannot be powered by PoE ,but, the Power Injector can be up to 100 meters away from the unit.
Dual coaxial cable to run from the power injector to the 1300. See attached notes:
Cisco Aironet 1300 Series
Cisco Aironet 1300 Series Access Point/Bridge Power Injector
The Cisco Aironet 1300 Series Outdoor Access Point/Bridge Power Injector,converts the standard 10/100 BaseT Ethernet interface that is suitable for weather protected areas to a dual F-Type connector interface for coax cables that are more suitable for harsh outdoor environments. The Power Injector also provides power to the outdoor unit over the same cables with a power discover feature and surge protection. To support longer cable runs from your wireless network switch or router, the Power Injector LR is designed to accommodate up to a 100 meter coaxial cable run plus 100 meters of indoor cat5 cable?enabling total cable runs up to 200 meters. The Cisco Aironet 1300 Series Outdoor Access Point/Bridge ships with the Power Injector LR2 and an AC power supply.
From this link:
http://www.cisco.com/en/US/products/ps5861/products_data_sheet09186a008022551d.html
Cisco Aironet 1300 Series Outdoor Access Point/Bridge Hardware Installation Guide
Ethernet Ports
The access point/bridge dual-coax Ethernet ports consists of a pair of 75-ohm F-type connectors, linking the unit to your 100BASE-T Ethernet LAN through the power injector. The dual-coax cables are used to send and receive Ethernet data and to supply inline 48-VDC power from the power injector to the access point/bridge.
Power
The access point/bridge receives inline power from the Cisco Aironet Power Injector (hereafter called the power injector). Dual-coax cables are used to provide Ethernet data and power from the power injector to the access point/bridge. The power injector is an external unit designed for operation in a sheltered environment, such as inside a building or vehicle. The power injector also functions as an Ethernet repeater by connecting to a Category 5 LAN backbone and using the dual-coax cable interface to the access point/bridge.
AIR-PWRINJ-BLR2
F-Type Connectors
Dual coaxial cable carries full-duplex Ethernet, DC power, and full-duplex console port (RS-232 connection)
From this link:
http://www.cisco.com/en/US/products/ps5861/products_data_sheet09186a00802252e1.html
Hope this helps!
Rob

PoE for Cisco 1242AG and 1310G Access Points

Dear All,
we purchased a Cisco 1242AG and a 1310G Access Point and in the DataSheet it was specified that these APs support Power-over-Ethernet. The problem is we don't see any RJ-45 port in either AP which could be used for connecting the AP to an PoE Switch. Can you please tell us how we can connect these APs to an 802.11af compatible PowerBridge (by Intermec) ? Thanks.

Hi Thorsten,
The 1242 should be good to go but the 1310 is powered quite differently. Have a look;
AP 1240 Series - Hardware (see diagram)
http://www.cisco.com/en/US/products/ps6521/products_installation_guide_chapter09186a008079b7f4.html#wp1071972
Connecting the Ethernet and Power Cables
http://www.cisco.com/en/US/products/ps6521/products_installation_guide_chapter09186a008079b7f4.html#wp1052781
1300 Series Power
Power
The access point/bridge receives inline power from the Cisco Aironet Power Injector (hereafter called the power injector). Dual-coax cables are used to provide Ethernet data and power from the power injector to the access point/bridge. The power injector is an external unit designed for operation in a sheltered environment, such as inside a building or vehicle. The power injector also functions as an Ethernet repeater by connecting to a Category 5 LAN backbone and using the dual-coax cable interface to the access point/bridge.
The power injector is available in two models:
Cisco Aironet Power Injector LR2 standard version (included with the access point/bridge)
48-VDC input power
Uses the 48-VDC power module (included with the access point/bridge)
Cisco Aironet Power Injector LR2T optional transportation version
12- to 40-VDC input power
Note The power injector and the power module must not be placed in an outdoor unprotected environment. The power module must not be placed in a building's environmental air space, such as above a suspended ceiling.
http://www.cisco.com/en/US/products/ps5861/products_installation_guide_chapter09186a008079b93b.html#wp1051840
Dual coaxial cable to run from the power injector to the 1300. See attached notes:
Cisco Aironet 1300 Series
Cisco Aironet 1300 Series Access Point/Bridge Power Injector
The Cisco Aironet 1300 Series Outdoor Access Point/Bridge Power Injector,converts the standard 10/100 BaseT Ethernet interface that is suitable for weather protected areas to a dual F-Type connector interface for coax cables that are more suitable for harsh outdoor environments. The Power Injector also provides power to the outdoor unit over the same cables with a power discover feature and surge protection. To support longer cable runs from your wireless network switch or router, the Power Injector LR is designed to accommodate up to a 100 meter coaxial cable run plus 100 meters of indoor cat5 cable?enabling total cable runs up to 200 meters. The Cisco Aironet 1300 Series Outdoor Access Point/Bridge ships with the Power Injector LR2 and an AC power supply.
From this link:
http://www.cisco.com/en/US/products/ps5861/products_data_sheet09186a008022551d.html
Cisco Aironet 1300 Series Outdoor Access Point/Bridge Hardware Installation Guide
Ethernet Ports
The access point/bridge dual-coax Ethernet ports consists of a pair of 75-ohm F-type connectors, linking the unit to your 100BASE-T Ethernet LAN through the power injector. The dual-coax cables are used to send and receive Ethernet data and to supply inline 48-VDC power from the power injector to the access point/bridge.
From this link:
http://www.cisco.com/en/US/products/ps5861/products_installation_guide_book09186a00804d3095.html
AIR-PWRINJ-BLR2
F-Type Connectors
Dual coaxial cable carries full-duplex Ethernet, DC power, and full-duplex console port (RS-232 connection)
From this link:
http://www.cisco.com/en/US/products/ps5861/products_data_sheet09186a00802252e1.html
Hope this helps!
Rob

Cisco Aironet ExpressCards

When are they going to be available? Please don't tell me you're going to let Linksys do it. Also, will you still be delivering the Site Survey utility? Will it be compatible with Vista?

Go HERE.
*** Cisco AP701E is not supported by Prime Infrastructure 2.1.1. Also, Cisco Aironet 1700 Series Access Points are not supported by Prime Infrastructure until Prime Infrastructure Release 2.2, which is yet to be released.
PI 2.2 is schedule for release some time December 2014 or January 2015.

Cisco Aironet 1131G cannot access BVI

Similar Messages

Maybe you are looking for