RV180W as access point to multiple existing VLans

The company that initially built our network setup sold us two RV180W as accesspoints for internal/Guest WLan provision. In the end they never properly installed them, so I am stuck with solving the riddle …
Q: Is it possible to connect an RV180W with two network ports to two existing VLans on a CISCO 2960 with the following funtionality
- VLAN 100 internal, authentification via Windows2012/Radius
- VLAN 101 guest access to CISCO ASA 5510 direct to Internet
and how am I going to configure this?
I am kind of lost, as I did not find a way to set up different IP ranges on VLAN tagged LAN ports on the RV180W, nor did I find a howto either in the manual nor on the web.
thanks in advance
Michael

already toyed around with the router in AP mode. What I understood so far:
- do not use VLan Numbers set up on corresponding ports of other CISCO equipment – the router does not care (understand?) about that,
- do not tag VLans,
- only use VLans to separate port/WLan combinations on the RV180W from each other,
then
- VLans will be separated,
- the AP will offer different WLans,
- even offer DHCP address leases, though I did not find a way to manipulate IP-ranges or gateway settings in AP mode …
Will have a go next week and try to use routing functionality for our planned external network
- to route the external VLan directly to our ASA Firewall,
- connect the internal VLan to our Win2012 DHCP Server,
- enable Radius authentification on the internal VLan.
Toying around was rather easy with trial and error, but
- reset, reboot and config is sluggish,
- which makes the needed trial and error approach a pita,
- documentation is really bad, it’s even missing the gaps,
- interoperability with business products is neither logical nor reasonably documented.
I run several ten year old linksys APs that are better documented and more straightforward to config.
If this is technical advance I want the developer’s money back …
accept my apologies for the rant
Michael
PS and last edit: the thing seems awesome, especially at its pricepoint, but the documentation is absolutely subterranean compared to what the router really offers …

Similar Messages

Can an Aironet WiFi Access Point bridge multiple internal VLANs?

I have Cisco Aironet 2700e access points. Historically they were configured with a single SSID on both radios with WEP 128bit security.
I now need to add new WiFi devices to the network that have limited flexibility. They must be associated only with a specific radio (2.4ghz or 5ghz) and WPA2PSK security.
My thought was to create two additional SSIDs on the 2700 access points, one for 2.4gz WPA2PSK and the other for 5ghz WPA2PSK. The pre-existing SSID will continue to use 128bit WEP. To do that I need to use VLANs on the 2700e.
I have no other VLANS on my network. I only need VLANs on the 2700e because I have different physical devices that support different WiFi frequencies and security options. I don't need to segment the network.
How do I bridge the VLANs on the 2700e?
Devices that connect to the non-native VLANs appear to be isolated from the rest of the network (as I would suspect with VLANs). But that's not what I want . I'm only using VLANs because I need multiple SSIDs, and I need multiple SSIDs because I have different physical devices that want different WiFI access point configurations. I can't seem to find any way to configure the 2700e to bridge the VLANs for the multiple SSIDs.
Any guidance would be appreciated. I could buy additional access points but that seems to be defeating the purpose of having a device like the 2700e.
Any help would be appreciated.
Thank you.

I made these changes to the example here:
https://supportforums.cisco.com/document/55561/multiple-ssid-multiple-vlans-configuration-example-cisco-aironet-aps
and it seems to be working. (By "working" I mean that I can now ping to/from devices connected on different SSIDs.) I had to make these changes from the CLI. There does not seem to be a way to make these changes from the GUI. Is that correct? If there is a way to make these changes from the GUI please let me know.
The changes I made were to make the sub interface for Dot11 radio 0 on the VLANs part of bridge-group 1. So assuming the config in the example:
ap(config)#interface Dot11Radio0.2
ap(config-subif)#no bridge-group 2
ap(config-subif)#bridge-group 1
ap(config-subif)#exit
ap(config)#interface Dot11Radio0.3
ap(config-subif)#no bridge-group 3
ap(config-subif)#bridge-group 1
ap(config-subif)#exit
I did not change the bridge group on the Ethernet interface.
Questions:
1. Did I create any new problems making this change? It seems to work, but am I going to get myself in trouble somewhere else? Intuitively it makes sense to me: the VLANs are now part of the same bridge group (1, the native VLAN). So all traffic should be bridged together. Correct?
2. I didn't change the Ethernet sub interfaces. I don't seem to need to make that change. I also don't like things sitting out there that I don't understand. Should I do anything to clean up the Ethernet interfaces?
3. The original configuration was made entirely from the GUI. This change needs to be made from the CLI. Can it be done from the GUI? I can't seem to find a way to change bridge groups for a sub interface from the GUI. It worried me that it can't be done from the GUI.
Thank you.
Larry

Single access point with multiple ssids and single channel possible?

Hi everybody.
I have this silly question.
Let say we have three vlans, vlan1,2,3 and they are mapped to wlans as follows:
Vlan 1 ssid1
Vlan 2 ssid2
Vlan3 ssid 3
AP --------trunk------Switchted network.
Our Ap has mobile devices in three wlans, i.e ssid1ssid2 and ssid3
Since AP uses half duplex mode, mobile devices need positive ack from ap before they can send data, therefore once channel let say channel 3( assuming 802.11b is used) can be shared by all mobile devices in three wlans.
Is my understanding correct?
Thanks and have a great weekend.

Hii ,
Yes ,that is pretty much possible as suggested by other experts on board. Depending on your access point you will have 1 (2.4 GHz) or both 2.4 & 5GHz radios.
You can configure multiple SSIDs (up to 16 ) known as MBSSID mode in autonomous environment. In Controller based architecture you can configure up to 512 WLAN (SSID) and transmit any 16 of them per AP (using AP group feature). However , it is recommended to keep multiple SSID count below 8 as for each SSID separate beacon will be sent on air which consumes more air time.
Hope this helps
Thanks
Vinay

RV180W add access point with roaming support

I have a customer with a RV180w running the latest firmware. We are currently using the router as a router and to provide wireless access. We want to add wireless coverage and I am interested in our options. We have a ethernet backbone which we could use to give the new AP LAN connectivity. Can we buy another RV180W and use it in AP mode and provide roaming wireless connectivty. The client wants a guest and business WLAN so we will use the VLAN feature of the router. How do we configure the new AP? Do we need to use WDS? If we use WDS, can we still use WPA2? Thank you for your assistance.

Hello Mr. Carl,
Yes is possible to use WDS and WPA2 at the same time.
The master AP will be setup as a RADIUS server to authenticate the other APs while the clients use WPA2-PSK which is set the same on each AP.
Let me share with you the information found about WDS and basic configuration, found on the guide me section.
WDS configuration:
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=ea8660ccb0cf4ae99cebfafd4303cdc1_WDS_Configuration_on_RV180W.xml&pid=4&fcid=&fpid=&slnid=13
RV180W configuration:
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=dd5990ef4ad947ae89da5c3e0b8bd985_Wireless_Configuration_on_RV180W.xml&pid=4&fcid=&fpid=&slnid=4
If this answer was satisfactory for you, please mark the question as Answered.
Diego Rodriguez
Cisco network engineer
Thank you

[solved] Arch linux access point with multiple interfaces for the NAT

Hi, I have a router running Arch linux. It is connected via LAN (let's call it eth0) to the internet. It has a second LAN interface, eth1, and a wireless interface in master mode, wlan0.
Now, Everything works perfectly except providing network connectivity on eth1 and wlan0 simultaneously. I followed the guide in the "Internet share" wiki article and use dnsmasq/hostapd for the AP. It appears as if all traffic from the router is sent to the wlan0 interface, even if it came in through eth1 (for example, dhcp requests). I cannot really find information how to solve this. The words "bonding" and "iptables" are floating around, but there is not really an easy to understand tutorial for this.
What do I need to do to use both the eth1 and wlan0 interface (for different clients!) on my router?
Best regards, and thank you in advance
Jan Oliver
/e: This seems to be my problem: http://www.novell.com/support/kb/doc.php?id=7000318 How do I solve this using the usual iptables? (The way described in the article doesn't work: "RTNETLINK answers: No such process" errors.)
Last edited by janoliver (2013-09-25 22:24:53)

Or you could bridge eth1 and wlan0, and make dnsmasq bind/listen on that bridge...

1242AG Wireless Access Point - Cannot Get DHCP IP for BVI1 interface - Multiple SSIDs...

Hello,
I am attempting to set up three Cisco 1242AG Wireless Access Points with multiple SSID's. I used the web interface and directions online to set up the two networks I want and at least one of the networks work wirelessly.
However, I have two problems:
The first, which is the most important, is that the "management" interface, BVI1, doesn't get an ip address from our DHCP server. I set the VLAN 60 (which you'll see in the documenation below) to be the native VLAN on the device as well as on the switch that the device is connected to as well as other settings in the configeration file below. Because of this, I can only manage the device via the console port which would be a huge pain once all of the devices are mounted.
The second problem is that I am not sure how to get both wireless networks broadcasting their SSID's. I have to manually type in the SSID for the second wireless network I have which I would prefer I don't have to. Anyway I can enable broadcasting on all of the SSID's?
Thank you for your time.
Regards,
Christopher Koeber
Using 7916 out of 32768 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP-18.wesleysem.edu
enable secret {Number Here} {Encrypted Password Here}
enable password {Number Here} {Encrypted Password Here}
aaa new-model
aaa session-id common
dot11 syslog
dot11 vlan-name Kresge vlan 20
dot11 vlan-name Library vlan 30
dot11 vlan-name Public vlan 60
dot11 vlan-name Secure_Public vlan 70
dot11 vlan-name Secure_Seminary vlan 80
dot11 vlan-name Server_Room vlan 1
dot11 vlan-name Straughn vlan 40
dot11 vlan-name Trott vlan 10
dot11 vlan-name Web_Room vlan 50
dot11 ssid (Secure) Wesley Campus
vlan 80
authentication open
authentication key-management wpa version 2
wpa-psk ascii {Number Here} {WPA Key Here}
dot11 ssid Public
vlan 60
authentication open
mobility network-id 60
username Cisco password {Number Here} {Encrypted Password Here}
username admin privilege 15 secret {Number Here} {Encrypted Password Here}!
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 80 mode ciphers aes-ccm
ssid (Secure) Campus
ssid Public
mbssid
station-role root
interface Dot11Radio0.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 254
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
bridge-group 30 spanning-disabled
interface Dot11Radio0.40
encapsulation dot1Q 40
no ip route-cache
bridge-group 40
bridge-group 40 subscriber-loop-control
bridge-group 40 block-unknown-source
no bridge-group 40 source-learning
no bridge-group 40 unicast-flooding
bridge-group 40 spanning-disabled
interface Dot11Radio0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 subscriber-loop-control
bridge-group 50 block-unknown-source
no bridge-group 50 source-learning
no bridge-group 50 unicast-flooding
bridge-group 50 spanning-disabled
interface Dot11Radio0.60
encapsulation dot1Q 60 native
no ip route-cache
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 subscriber-loop-control
bridge-group 70 block-unknown-source
no bridge-group 70 source-learning
no bridge-group 70 unicast-flooding
bridge-group 70 spanning-disabled
interface Dot11Radio0.80
encapsulation dot1Q 80
no ip route-cache
bridge-group 80
bridge-group 80 subscriber-loop-control
bridge-group 80 block-unknown-source
no bridge-group 80 source-learning
no bridge-group 80 unicast-flooding
bridge-group 80 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
encryption vlan 80 mode ciphers aes-ccm
dfs band 3 block
channel dfs
station-role root
interface Dot11Radio1.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 254
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
interface Dot11Radio1.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
interface Dot11Radio1.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio1.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
bridge-group 30 spanning-disabled
interface Dot11Radio1.40
encapsulation dot1Q 40
no ip route-cache
bridge-group 40
bridge-group 40 subscriber-loop-control
bridge-group 40 block-unknown-source
no bridge-group 40 source-learning
no bridge-group 40 unicast-flooding
bridge-group 40 spanning-disabled
interface Dot11Radio1.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 subscriber-loop-control
bridge-group 50 block-unknown-source
no bridge-group 50 source-learning
no bridge-group 50 unicast-flooding
bridge-group 50 spanning-disabled
interface Dot11Radio1.60
encapsulation dot1Q 60 native
no ip route-cache
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 subscriber-loop-control
bridge-group 70 block-unknown-source
no bridge-group 70 source-learning
no bridge-group 70 unicast-flooding
bridge-group 70 spanning-disabled
interface Dot11Radio1.80
encapsulation dot1Q 80
no ip route-cache
bridge-group 80
bridge-group 80 subscriber-loop-control
bridge-group 80 block-unknown-source
no bridge-group 80 source-learning
no bridge-group 80 unicast-flooding
bridge-group 80 spanning-disabled
interface FastEthernet0
ip dhcp client update dns
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 254
no bridge-group 254 source-learning
bridge-group 254 spanning-disabled
interface FastEthernet0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
no bridge-group 10 source-learning
bridge-group 10 spanning-disabled
interface FastEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface FastEthernet0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
no bridge-group 30 source-learning
bridge-group 30 spanning-disabled
interface FastEthernet0.40
encapsulation dot1Q 40
no ip route-cache
bridge-group 40
no bridge-group 40 source-learning
bridge-group 40 spanning-disabled
interface FastEthernet0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
no bridge-group 50 source-learning
bridge-group 50 spanning-disabled
interface FastEthernet0.60
encapsulation dot1Q 60 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
no bridge-group 70 source-learning
bridge-group 70 spanning-disabled
interface FastEthernet0.80
encapsulation dot1Q 80
no ip route-cache
bridge-group 80
no bridge-group 80 source-learning
bridge-group 80 spanning-disabled
interface BVI1
ip address dhcp client-id FastEthernet0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
line con 0
line vty 0 4
end

I am using a third party DHCP server which is our Windows Domain Controller. I have the ip helper-address set for the native vlan of the Access Point through a layer 3 distribution switch (a Catalyst 4506) that the current switch connects to.
I didn't see any event on the logs for the AP.
Let me know if I need to do something else.
Thanks.

Newly installed OS 10.3.1.1565 - Where have all my Access Points gone?

I have a 2 access points at home, 1 is my original modem, and the other is my Dual Channel Netgear router. This provides access points on the 2.4Ghz channel and on the 5Ghz channel - all of which you can give different access point names and security passcodes if you wish. On top of this, there's also provision for a guest account on each band, which again can be named anything you want.
Anyway, before my Z10 automatically download and installed OS10.3.1.1565 last week, my phone could see and report all 5 of my access points (via Wifi Analyser). Now, with this O.S., it refuses to report all 5 access points and will only display the AP that's connected. It does however show me all my neighbours AP names. It just hides my 4 idle APs - as presumably it knows they're all part of the same network. I've tried various WIFI analysers but they ALL behave in the same manner. This appears to be a function of the phone's O.S.
As I walk around the house, the phone does drop the weak AP and suddenly discover and report my alternate AP - though It's very cumbersome. I liked being able to see all of my APs on WIFI Analyser as it helped build confidence that I had reasonable coverage around the house. Now with this O.S. I feel like I've lost 4 access points.
I don't understand why my phone now disregards 4 of my access points and doesn't display them through any of the WIFI Analyser tools. My various other devices around the house (all running WIFI Analyser) report the signal strength of all 5 access points. I've tried toggling the 'Inter Access point Handover' setting, as well as enabling IPV6, but to no avail. I hope this isn't the design intent, and that one day I can view all 5 of my APs again.

Completely disappeared. Not listed in the Networks and Connections screen.
This just lists the currently connected Access Point. WIFI Analyser does the same - it appears that 4 of my access points don't exist.
That is until I walk out of range of the connected AP, and the phone suddenly displays the next AP and hides the previous one.
Before this update, I could see all 5 APs from anywhere in the house (albeit at various signal strengths)

Securing Aironet 350 Access Point

Hello -
My small network is operating correctly using the Aironet 350 Access Point and multiple clients. However, the setup is not secure.
How is it possible to secure access to our AP?
Specifically: I would like to establish a WEP key, as some devices (i.e. pocket-pc's) do not support more advanced security schemes.
Thanks,

Extensible Authentication Protocol (EAP) authentication, also called 802.1x authentication, provides dynamic WEP keys to wireless users. Dynamic WEP keys are more secure than static, or unchanging, WEP keys.
For more details on configuring both types of WEP refer the following document,
http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo1100/accsspts/i12215ja/i12215sc/s15wep.htm

Transfer WISM Access Point license to another type of controller

Guys,
Is it possible to transfer Access Point license from existing wism to another type of controller ?
For example my client have existing wism with support for 300 access point and the plan will be migrated to Cisco WLC 5508, can the access point license transfer from existing wism to new Cisco WLC 5508, so i just buy Cisco WLC 5508 with minimum access point (12 license) and get license transfer from existing wism (300 license) so the total 312 license.
Is it possible to do that ? If not what the best scenario (for value) for hardware choice for controller if my customer want to migrate to new hardware ?

Refer to " Re hosting a License " from
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_011.pdf
It has both a> GUI b>. CLI mode steps

1142 Access Point - DHCP trouble

Hi there,
I am setting up an autonomous 1142 Access Point. The intended goal is to get it accessible though 2 SSIDs:
Private: VLAN3 (our internal data VLAN)
Guest: VLAN98 (our DMZ/Segregated VLAN)
At present, our VLAN3/internal users get DHCP addresses from x2 Windows DHCP servers. Eventually, the DMZ VLAN connections will get their IP addresses from a switch in our DMZ VLAN.
At the moment, I am able to authenticate with the Access Point through the VLAN 3 SSID but never get an IP address. I have posted the switch port config below as well as the Access Point config. I'm a newbie on these devices so any help would be greatly appreciated:
**SWITCH PORT CONFIG**
interface FastEthernet0/10
description IT Office Wireless Access Point
switchport trunk native vlan 3
switchport trunk allowed vlan 3,98
switchport mode trunk
speed 100
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
**AP Config**
Attached to the post as quite wordy

Hi Danny,
You have a native vlan mismatch between the AP and the switch. The switchport has vlan 3 defined as the native, but it is not defined as native on your AP.
You will simply want to add the keyword native at the end of the following line under your .3 subinterfaces:
encapsulation dot1Q 3 native
On another note, to take full advantage of the 1140 series AP with 802.11n connections, you will need to use WPA2 with AES encryption:
encryption vlan x mode ciphers aes-ccm tkip
This will allow use of both WPAv1/TKIP and WPAv2/AES
-Patrick Croak
Wireless TAC

Outdoor Access points PoE power issues

We are currently deploying 5 more 1530 Outdoor Access points to the existing 2504 wireless controller with 15 Airlap 1142n AP's.Now all the AP's are connected to the catalyst cisco 2960 switch.
a)Is the catalyst 2960 switch supply enough power for the outdoor AP's or I have to use any external power injector source?

Is the 2960 370W or 720W?
"The Cisco Aironet 1530 Series can be powered over the Ethernet connection with power directly from an appropriately powered switch port or from an inline power injector."
The 1530s take:
1530I: < 30 W
1530E: < 25 W
(http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1530-series/data_sheet_c78-728356.html)
AP1140: 12.95 W
(http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1130-ag-series/datasheet_c78-502793.html)
So depending on the 2960 in question, I believe you may be able to power them up, do you have anything else hanging off the switch?
We had issues with lighting arrestors causing PoE failures in the past. Removing them cleared the issue.
Please rate and marked if this answers your question.

Light weight access point, vlans, multiple ssids

Hi everybody
Let say we have an light weight access point ap1. Ap1 is broadcasting two ssids:
cisco1 which is mapped to vlan 1
cisco 2 which is mapped to vlan 2
If ap1 is using channel 6 for cisco 1, does it mean ap1 will also use same channel i.e channel 6 for cisco2?
thanks and have a great weekend.

sarahr202 wrote:Hi everybodyLet say we have an light weight access point ap1. Ap1 is broadcasting two ssids:cisco1 which is mapped to vlan 1cisco 2 which is mapped to vlan 2If ap1 is using channel 6 for cisco 1, does it mean ap1 will also use same channel i.e channel 6 for cisco2?thanks and have a great weekend.
Lightweight WAP right? As in controller-based WAP?
If this is the case, then the answer is both a yes and a no.
Let me explain:
Throw away the notion that you can set the channel down. I mean, if you have a controller-based WAP, the last thing you want to do is "micro-manage" which channels your WAPs operate on. I mean, you can but as a rule-of-thumb, you don't and let the controller sort things out.
So, going back to your question: You whave multiple WAPs and two SSID: 1 and 2. Let's presume that you've configured that all your WAPs will be broadcasting SSID 1 and SSID 2.
The decision about what channels each WAP will be operating on falls squarely on the Wireless LAN Controller (WLC). The WLC makes this decision based on a blah-blah-blah algorythm. If, for example, WAP A and, say, WAP R can "hear" each other on the same channel, the WLC will make the decision and say, "Hey WAP R, since you and WAP A are operating in the same channel and both of you can hear each other, why don't you, WAP R, operate in channel 11.".
However, if WAP A and WAP R can't see each other then both of them can operate in the same channel.
NOW, here's comes the tricky question ... Here's the scenario: You have SSID 1 and SSID 2. You want all your WAPs to broadcast both SSID. HOWEVER, you want SSID 1 to operate at, say, 1 Mbps rate only while SSID 2 can operate at all other data rates.
Yes, this can be done using RF Profile and AP Groups.
Is this what you are asking?

New Xperia Z1 wifi problem 14.4.A.0.108 (Multiple access points)

Hi,
I recently got a replacement Xperia Z1. This phone was immediately updated to the latest firmware (ending with 108) so I do not know if this problem existed prior to the update.
My problem is that the phone thinks it's still coneected to a wireless network even when it's not which prevents the phone from reconnecting when in range of a new network.
When it's working it looks like this: (same signal strenght in both the top bar and the settings)
When it's not working it looks like this (sifferent signal strenghts when compring the settings and the top bar)
And I'm 15km away from my home network
To make it work again I only have to turn off wifi and then turn it on again.
This screen shows for about 10 seconds when the problem has occured (instead of usually 1-2 seconds)
I've already tried to reset and reinstall the firmware. Is this an hardware error or has this something to do with the latest update?
//Mikael

An Update:
I've found that this problem only occurs on networks with multiple Access Points and when the phone is switching from on AP to another.
If the problem occurs the network stays "connected" even though I leave the area as described in my first post.
Does this help?
I've tested on several networks.

Using a RV180W to encrypt data passing thu an existing VLAN

Hi,
I have a customer with an existing VPN across 20 sites that has been implemented using ADSL lines and routers. The VPN is used to view confidential CCTV data. This VPN, which I will call the security VPN, must be upgraded to use the customer's existing IT network but must have its own security so that only authorised Security staff within the security VPN will have access to the equipment within the VPN. The existing security equipment will not be changed, but if necessary can be reconfigured. I have tried to setup the RV180W but I am doing something wrong and the RV180 is freezing. Each site has its own subnet, e.g. 10.0.x.0/255.255.255.0. The equipment at each site is setup to use the gateway 10.0.x.2. IT have provided each site with an access IP address of 10.0.x.3. What I am trying to do is to setup the RV180 with an address of 10.0.x.2 to act as a replacement gateway. This will encrypt the data and then send it 10.0.x.3. The IT internal network will then route the data to one of the other sites in our security VPN via its access IP address of 10.0.y.3 where the RV180 at this site will pick it up and route it within the target site. Any of the 20 security sites must be able to connect to any IP address at any of the other sites. The ADSL connections are obsolete and will be removed. The new infrastructure that IT will provide is based on VLANs. Is what I am trying to do possible using the RV180 and if so how should I configure the RV180 at each site? If someone can assist me it would be greatly appreciated.

Thank you for your reply,
I have attached a drawing of what I need to achieve. I have omitted the old ADSL links that are now obsolete. My concern is: Is it possible, and how can I configure, a VPN or any other method of encryption over an existing VLAN or VPN whilst keeping the existing networking configurations at each site. This is required to ensure that the IT department cannot access or view sensitive security data (e.g CCTV and access profiles) that is moving between the remote sites and Central Security. The other challenge is that the Cisco router will be installed in the remote sites one at a time over 3 months. During this time sites must be able to operate with or without the upgraded security depending upon what has been installed.

Dynamic VLAN on Access Point using RADIUS

Hi.
I am using a single Cisco 1130AG authenticating to RADIUS on Microsoft IAS (I do NOT have a WLC)
I was wondering is it possible to use one flat SSID in my network and then dynamically assign VLANs to users based on matching of RADIUS Policy and RADIUS Return attributes?
I have configured the attributes on radius as per documentation;
* IETF 64 (Tunnel Type)—Set this to VLAN.
* IETF 65 (Tunnel Medium Type)—Set this to 802.
* IETF 81 (Tunnel Private Group ID)—Set this to VLAN ID.
The returned VLAN ID exists on the Access Point and direct connection to the SSID without the return value works okay.
Each time I connect the VLAN just defaults to the native VLAN for the SSID
I think it may be impossible without WLC!
HELP!!

From what I found when using MBSSID it appears you cannot use dynamic VLANs.
However you can use a single broadcasted SSID and various non-broadcast SSIDs with dynamic VLANs.
Ideally a single SSID and dynamic VLANs via dot1x would be fine for my setup.
However I have a specific wireless device which cannot use dot1x/EAP and therefore I need an second broadcast SSID to use for this. Which then causes the dynamic VLAN setup not to work.

RV180W as access point to multiple existing VLans

Similar Messages

Maybe you are looking for