VOICE WLAN BRIDGE

Hallo Community,
wie im Anhang zu sehen ist folgender Aufbau in der Planungsphase.
Hardware
Cisco 886 VDSL/ADSL
Cisco SG 300-28P 28-port
cisco AP WPA 321
Cisco SPA 122
Einrichtung
Die Einrichtung des konvergenten Netzes erfolgt über zwei VLAN's (Daten / Voice).
Die Konfiguration des Switches / Telefone snom 720 wird über LLDP für die Auto Voice Provisionierung erfolgen.
Mit DSCP 46 EF die QoS
Router 886 fungiert als DHCP für das Voice VLAN
Die Frage an der community ist wie eine WLAN BRIDGE konvergent mit einem best practice aufgebaut wird.
Eine Anfrage bei cisco hat folgenden Lösungsvorschlag
Es werden drei WAP321 benötigt.
Ein WAP321 wird an dem Switch direkt verbunden und zwei WAP 321 sind in dem abgesetzten Office installiert.
Die zwei AP im externen Office sind notwendig aufgrund der WLAN Bridge die nur ein VLAN auf die MAC Adresse binden kann.
Die beiden AP im Office bekommen die SSID Voice und Data.
Was uns unklar ob diese Konfig so wirklich funktioniert oder ob es falsch verstanden ist.
Zu diesem Lösungsweg zwei konkrete Fragen.
1.) LLDP
Ist über die WLAN Bridge ein LLDP bis zum Switch möglich ?
Ist ein manuelles Einbinden der Telefone notwendig VLAN usw.
2.) Konfiguration
Wie sieht die Konfiguration WLAN Bridge / VLAN im Detail aus.
Mit dem Thema WLAN Bridge und Voice in Verbindung mit LLDP zurzeit wenig Erfahrung, kann jemand helfen?
Gruß
Rene

Hallo Rene,
1.) LLDP
Ist über die WLAN Bridge ein LLDP bis zum Switch möglich ?
LLDP ist ein Layer 2 protokol und ist im SG300-28P supportet.
Eine WLAN Bridge uebertraegt die Informationen von einer Stelle an die andere. Die Bruecke veraendert die Informationen nicht.
2.) Konfiguration
Wie sieht die Konfiguration WLAN Bridge / VLAN im Detail aus.
Eine Erklaerung zur WLAN Bridge ist im Anhang.
Gruss,
Friedrich Scharz

Similar Messages

Help with larger sized voice wlan.... design considerations.... tips...etc...

Hi Everyone,
I'm hoping that you guys and gals can help me with an ongoing problem that we have at one of our sites. We're working on areas of the location due to it's size and phone load. We have an area, that I will refer to as building A, that is roughly a square that is 240' x 240'. The inside of the building has some pallets inside for storage(they allow RF to penetrate through them) and also some metal production lines. There is also a mezzanine / elevated area in the middle that the users can walk under. It's not very large, but it would affect a phone if you walked underneath it while making a call. So, now that I have a brief description of the environment, I will tell you the equipment I'm running...
1 x 4402 50AP Wireless Controller with 6.0.199.3 (MR3) installed.
We currently have nine AP's installed in this area, with 4 up front so that way they cover the office areas better. Most are 1231G's, but some are 1242's.
Since we do not have A radios everywhere (budgetary decision) we are running all of these phones on 2.4Ghz (Yikes! I know!)
The 7920's use LEAP and the 7921's use PEAP MS-CHAP v2 with CCKM enabled on the controller.
I also have 802.1p wired QoS enabled for the voice QoS profile and it is applied to our voice WLAN.
We have conference rooms in the front area that will need to support roughly 20-30 maximum mixed 7920 and 7921G phones in a roughly small area. (Yikes! I know!)
We also have a 2106 with mesh .54M installed, but it is for outdoor AP's and should not be affecting this area.
So, I guess my questions are....
Has anyone ever operated the 7920 and 7921G's in mixed mode?
I'm thinking about separating the 7920s on 2.4 and tell the 7921's to prefer the A band or just use A. This will require A radios / surgery, but we've dealt with different code trains, TAC configs, and even added a few more radios. I think it's time to say we need to redesign this area. It doesn't help that phones keep getting purchased either....
What rule of thumb would you guys / gals say would be appropriate for this phone count in terms of the number of AP's I should use?
Since we're dealing with two different phone models, it makes it hard to simply just read the deployment guide. I know these phones can coexist, I just think we're running into over capacity and problems with 802.11B in the mix. In the conf room right now, there are most likely signals from at least two AP's. This doesn't seem like enough bandwidth for just the 2.4 Ghz range when 20 - 30 phones are in there. Not all of them are calling, but the associations / mgmt traffic alone must be horrendous since the phones are 802.11B
We are going to do a manual survey with a 1242 since that AP will support both phone models. I think we may need to survey twice if we're going to go this route; One survey for the 7920's on 2.4Ghz with a 1242AG and one survey on 5Ghz with a 7921G. I think that will provide the info we need to get the AP's repositioned where they need to be.
What kind of power levels should I be using in an area like that? We've originally had a survey at 50mW, but since then we turned the power down to pwr lvl 3 in some spots due to the additional AP's. I've seen references of roughly 1 AP per 3000 sq. ft at pwr level 4, but that seems overkill.
Can we run mixed power levels on AP's with the phones? Or will that cause one way audio due to the transmit power diffrences in the cells?
I'm thinking that we should pick a power level, survey the -67 cell size at the power level, add more AP's so that way they are overlapped 15-20%, and then actually implement the design. I'm pretty good at getting decent channel assignments in place. I know of non-overlapping channels, RRM, etc. I also have an AirMagnet laptop with an Aironet Adapter. It is good for finding noise, interference, etc...
I understand this is practically a book, but at this point, we've been trying a LOT of different things in order to get this to work properly. I think it's finally time for me to "strongly suggest" that we do the following...
1. Choose ONE phone model.
2. Choose ONE AP model.
3. Make sure to implement the 5Ghz band for all AP's so we have complete coverage.
4. Choose ONE power level for each band. This will affect the coverage and placement of AP's. I'd imagine that we'd need to survey with A first, and then survey with b/g. Typically we can use the 1242 and get about the same cell size on both bands, but 5Ghz is a higher frequency and may not penetrate as much as 2.4 Ghz..
5. Come up with a new coverage map based on a manual site survey with the phones mentioned above.
6. Implement the design.
7. Use it.
8. Try not to have a heart attack when the system actually supports that many phones in that area...
So, please, let me know your thoughts and if you have any suggestions. It would be greatly appreciated. We've been slowly working out the gremlins in the phones there over the past few years. I'm more of a data wireless person myself, but I do have good luck with a low to moderate phone count (usually no more than 7 calls per AP). Once we start doing craziness like trying to get 20-30 802.11B phones to work in the same area on only one or two AP's, then things start to become a challenge, especially when we don't have the 5Ghz cells to help with the bandwidth requirements for voice....
Thank you for your time,
Craig

There's a pretty recent (last few months) Voice over Wlan design guide published (was published for the 9971 phones - but all great advice) and it recommends just about all the settings required for an off the shelf wireless voice network.
http://www.ciscosystems.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/7_1_3/english/deployment/guide/9971dply.pdf

Certificate on wlan bridge 1400

I have a wlan network with EAP-TLS Authentication. So any clients have a certificate, but some client's in the fabrik have no wlan Adapter,
so i must use a wlan bridge (such as 1400 series). So is it possible to use a certificate on the wlan-bridge, to
have a TLS Tunnel from the bridge ?
regars Wolfgang

Hello Wolfgang,
do your wired clients already have a (legacy) e.g. RADIUS server to which they authenticate ?
If not, you will need an authentication server that can 'distinguish between wired and wireless authentication requests for the same user and handle them appropriately. E.g. Interlink Networks RAD-Series and Secure.XS servers have the flexibility and power to configure both wireless and wired authentication for the same user groups.
If you already have a legacy e.g. RADIUS server, both the EAP and the RADIUS have to work together, preferably by, as you suggested, a TLS tunnel.
Is that what you are asking ?
Regards,
GP

Voice WLAN - HREAP

Hi to all,
I'm implementing a WLC2106 for a small Voice WLAN environment using all the Blueprint settings defined in the CCO documents ("Voice WLAN designing" and "Cisco 7921 Implemenation Guide..").
In these documents the Voice WLAN configuration examples are always setup using the WLAN as Local Authentication and Local Switching without mentioning if the use of H-REAP will be also fine!
Since on my WLC I've to setup also a Data WLAN which will use H-REAP, I would live to know if H-REAP is also working fine configured on a Voice WLANs? Or should I use it only for Data WLANs?
Tnx for the feedback
Omar

Hi to all,
thanks for your info...I've rechecked again and again the WLC configuration regarding the 11a radio configuration and all is fine...
The WLC OS and Phone FW are the same as you mentioned above...
I've done a Site Survey using the 7921G and two other IP phone (another 7921G and a 7925G) and all were experiencing randomly disconnections from the Wireless LAN...the 7925 had the best behaviour since it had been disconnected only a couple of times...the 7921G not...
On the Site-Survey we've seen that the 7921G had seen 2 out of 3 APs...sometimes all threes, the 7925G had seen always all 3APs...
the strange thing is that the 7921G Site-Survey has informed me that Proxy-ARP is not supported...but from WLC Release 5.0 Proxy-ARP is enabled by default and you couldn't disabled..morever the disconnections are happening less when on the phone there is an active call..
I'm start to thinking that these randomly disconnections are related to external interference...
Omar

ACS 4.1 Server and WLAN Bridge

Hi,
we have a Cisco Bridge (with 1310Gs)and have the problem that the non root bridge does not reach the ACS server with its authentication requests (when we use OPEN authentication the bridge works fine).
The authentication requests by the root Bridge are passed to ACS w/o any problems.
How can I tell the Root Bridge to pass on the AUTH-requests by the Non Root Bridge to ACS ? (we do not even see any failed requests from the NON Root AP on ACS - nothing arrives there...). Thanks for helping.
Cheers,
T.

Following would be the right section to put this question,
Wireless - Mobility | Security and Network Management.
As issue is not with ACS, but with the way communication takes place between root and non root bridge.
Regards,
Prem

Number of connections over WLAN bridge?

I have a network that has been working flawlessly for many years but when I recently added a printer I ran into some problems. The printer is connected to a switch that is connected to an Airport Express that is connected over WLAN to an Airport Extreme. My problem is that I can only connect four devices to the switch. If I connect a fifth device it does not get an IP adress until I disconnect one of the other four devices. Please see the attached overview of the network. Red dotted lines represent wireless connections.
Any ideas about what causes this behavior is appreciated. Thank you.

on a jetpack or mi-fi 5 GB is nothing. Streaming Netflix can use 2.3 GB an HOUR. Even streaming YouTube in HD can use 1 or 2 GB per hour. I'm not sure why people think 5 GB is a lot for a regular internet connection. it's not. That why people should be using cable or DSL or fiber for internet

WLAN Bridging with VLANs

Hello,
I've been attempting to set up a wireless bridge between two short range locations. I can get the exact set up to work in a lab environment until I place it in the field.
I'm not too great with explaining myself so please forgive me.
VLAN 100 is our set Wireless VLAN for the network, and it is set in a trunking native mode on Switch1
We are attempting to get the switch on the other side of the wireless bridge to use VLAN 101
So we have Switch1 -> Wireless AP1 -> Wireless AP2 -> Switch2
Our wireless AP's are controlled using a WLC.
From the Wireless controller we are able to access and control both Wireless AP's and they show proper configuration.
Switch1 is directly connected to our network and is working properly with devices directly connected to it.
Wireless AP1 is working properly and broadcasts the proper wireless networks as well as connects to Wireless AP2.
Wireless AP2 can see Switch2 in the CDP and has all the information for it. Though it seems that Switch2 is unable to connect to the Wireless AP2 even with a direct connection.
Sorry if this is confusing!
I can give more information if necessary.
Thanks,
David

The point of a bridge is to span the same network across multiple devices. I bet if you configure a vlan 100 on switch 2 and attach the ap to that port, it will work.
Sent from Cisco Technical Support iPad App

Voice over WLAN - Cisco 2504 and iPhones/Androids

All:
I'm working on a solution for someone who already has a Cisco WLC 2504 running 7.6.100 and 2602i APs. They are running iPhones with a SIP application instead of purchasing Cisco 7925G phones. They are having issues when roaming to different APs.
Site survey is good. I also used a laptop with Net Surveyor on it - signal looks good. SNR is good. They used to have coverage issues as well but I got that taken care of for them. Only issue now is roaming.
WLAN SSID:
-Qos: Platinum
-FT-PSK and PSK enabled
802.11a/n/ac Radio:
-Client Roaming: -67dBm for RSSI threshold and -62dBm for scanning threshold.
-Disabled 6mbps and 9mbps and 12 mbps is set to mandatory. All others are supported
802.11b/g/n Radio:
-Client Roaming: -67dBm for RSSI threshold and -62dBm for scanning threshold.
-Disabled 1mbps - 12mbps. 18mbps set to mandatory. All others are supported
Switch to which WLC is connected:
-switch ports used to connect to the controller are set to trust CoS and ports to APs and uplinks are set to trust DSCP.
With these setting changes - I believe most everything else is default. I am confused about the following:
-Best practice link - http://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/2_Gen_Troubleshooting_Guidelines.html
Says to configure voice WLAN to use 802.11a. Issues with that: Some Android's could not connect AND the big one - I am not able to set Qos to use 802.1p for the SIP WLAN. It tells me to disable 802.11a and 802.11b. If I go into each radio on 'Network' tab and disable these - NOTHING can connect to any SSID. So unless I've misunderstood something - this is a contradiction in the best-practice link I posted above.
another question: If I enable FT-PSK and PSK - for devices that support FT-PSK (which i'm under the impression is 802.11r) will these devices use that and for devices that don't they'll use 'regular' PSK? How do I know if my client is connecting using PSK or FT-PSK as both are enabled on the same WLAN.
Again - only issue is roaming. I second or two of 'choppy' voice then everything is back to normal working as expected. Any ideas as to what else I can enable to get these iPhones to roam better - if this is even possible. Can iPhones roam using a SIP app with zero voice interruption? This is the equipment that they got and can't get anything else so I got to make the best of this. Perhaps I've already done that? Any ideas/suggestions are very much appreciated.

Hi
Before any other think I would like you to upgrade your WLC image to 7.6.130.0 & FUS to 1.9.0.0. FUS upgrade will require 30-40min downtime to your wireless.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn76mr03.html
It tells me to disable 802.11a and 802.11b. If I go into each radio on 'Network' tab and disable these - NOTHING can connect to any SSID. So unless I've misunderstood something - this is a contradiction in the best-practice link I posted above,
This simply says, you have to disable radio band before changing QoS profile values. Once you change those value you can re-enable the radio band. :)
If I enable FT-PSK and PSK - for devices that support FT-PSK (which i'm under the impression is 802.11r) will these devices use that and for devices that don't they'll use 'regular' PSK? How do I know if my client is connecting using PSK or FT-PSK as both are enabled on the same WLAN.
Read these 802.11r post & you will understand how 802.11r works. There are certain client devices does not like PSK & FT-PSK capability advertise on the same SSID & may have connectivity issues. But most of the clients like iPhone, iPads,etc will connect without any problems.
http://mrncciew.com/2014/09/06/cwsp-802-11r-ft-association/
http://mrncciew.com/2014/09/07/cwsp-802-11r-over-the-air-ft/
http://mrncciew.com/2014/09/08/cwsp-802-11r-over-the-ds-ft/
"show client detail <mac_address>" should indicate if client connected over FT-PSK or PSK.
HTH
Rasika
**** Pls rate all useful responses ****

EA6300 - Cascading the Linksys router to another router (LAN-LAN) - Does not Bridge built in Wifi AP

Regarding:
http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=3733#
Cascading the Linksys router to another router (LAN-LAN)
The Bridge mode function on the EA6300 does not bridge the Wifi AP radio to the network.
The ethernet ports are bridged, and the router can see network devices and wifi devices connected to itand ping devices in both directions , but Wifi clients connecting to the unit running in bridge mode are not "bridged" to the network.
~
Using the built in webpage of the router, all devices can be pinged.
Ethernet RJ-45 devices plugged into it can ping the unit and pull up the units config webpage, but not ping wifi clients connected to it.
Wfii devices connected to its access point radio, can pull up the units config webpage, but not ping ethernet RJ-45 devices connected to it.
If there is a bridge, then the bridge is broken in half and not functional.
~
All devices are set with IPs on the same subnet, 192.168.2.x
~
I have a Netgear router in Bridge mode, and it works fine, connecting the wifi access point and RJ-45 ethernet clients together like it should be, so I know how Bridge mode... should work...
But it doesn't on this unit, it is not working completely out the factory door. It will bridge one Router to another via the RJ-45 ethernet ports, but its own AP radio is no longer bridged and connected (like when running in NAT
Note that doing cascading using NAT as described under "Cascading the Linksys router to another router (LAN-WAN)" works fine.

Hi,
There's no WLAN bridge feature on the new Linksys Smart Wifi routers. You might also like to check and review these articles about Bridge Mode:
Article ID: 24583 - Setting up your Linksys Wi-Fi or Smart Wi-Fi Router to Bridge Mode
Article ID: 25714 - Setting up your Linksys Smart Wi-Fi Router to Bridge Mode using your Linksys Smart Wi-Fi Account
Hope this helps!
If everyone needs to believe in something, I believe I'll have another beer..

Connecting TC to Wireless Internet source(no ethernet ports) to create another WLAN to use that internet.

Hello,
I have a Telstra Turbo Elite wireless mobile boroadband device (see link) this device has no ethernet ports, it only connects to a mobile BB signal and then provides a WLAN that you can access wirelesly.
I want to connect my TC to this device wirlessly and then create a separate WLAN network that my household devices can connect to and use the internet connection provided by the Telstra device. So that I can use the TC to store my digital media and backup my laptop aswell.
How do I do this?
I tried turning the TC into a WLAN bridge but then i could not access the 2TB HDD in it and thus could not use Time Machine either.
Please Help.
Simon

I want to connect my TC to this device wirlessly and then create a separate WLAN network that my household devices can connect to and use the internet connection provided by the Telstra device
Unfortunately, this is not possible.
The TC needs a wired Ethernet connection at its WAN port to be able to create a wireless network.
The only way that this might work would be to add a wireless to Ethernet bridge, then feed that signal to the WAN port on the TC.

How to determine PSK on WLAN?

Basically I have been asked to manage a system pre-configured because the person who managed it left.
We have a Voice WLAN setup and obviously security has been setup on it as well.
Is there a way to find out what they PSK is for that WLAN without resetting it to something new?
Since we are using the wireless 802.11b phones, is it in the phone template maybe? I can't seem to figure it out.....
No one seems to have documented it nor does anyone have a clue as to what it could be either.
Thanks,
Ed

Yep, sounds like you're hosed.
Any chance of finding the original configurer ( not a word, I know , I know ...) and beat it out of them?
Call the integrator and {ask them | threaten to sue them}? That *is* the kind of information they would likely keep, if only to make their future service easier.
With WEP, you had a shot, with WPA your only bet is calling the NSA and see if they can give it to you (Uncle Sam has *all* the keys ;-) )
Oh well, good luck, Happy Thanksgiving (or "just another pleasant Thursday" if you're not USA)
Scott

PC + Softphone over WLAN QoS

I could not find after hours of searching what Cisco’s best practice when using a PC and softphone in a wireless environment.
We have always had wireless phones in one WLAN (platinum) and PC in another WLAN (silver). But now we have PC + Softphone scenario which is growing
Do we now put all PC's into the voice WLAN (hundreds of users) which is setup as Platinum and mark the voice traffic from the softphone DSCP 46 (maybe 48 because of WMM and COS mapping) and everything else from PC mark as best effort?
If WMM is turned off on the PC will the AP then treat all traffic as Platinum level regardless of DSCP marking.
If I leave the users in the Silver WLAN then all traffic will get marked down to best effort.This is current setup and voice quality is suffering.
I don’t feel comfortable putting hundreds of users on a Platinum level WLAN but how else can I prioritize softphone voice traffic. What are the implications of putting pc + softphone users into the voice wlan? What does cisco recommended for this scenario?
if you have any insight/experience/documents please let me know
Thanks!

steve sousa wrote:Do we now put all PC's into the voice WLAN (hundreds of users) which is setup as Platinum and mark the voice traffic from the softphone DSCP 46 (maybe 48 because of WMM and COS mapping) and everything else from PC mark as best effort?If WMM is turned off on the PC will the AP then treat all traffic as Platinum level regardless of DSCP marking.
WLC does not do anything to the QoS on the packets it forwards except the translation between 802.11e ot 802.11p.
If you have clinets that are connected to a Platinium profile but they use normal DSCP (data. No priority) the traffic will be treated normally as data with no priority.
If another WMM enabled client connected to the same WLAN and send voice traffic with platinum profile, the traffic will be mapped to the appropriate 802.1p and will pass the wire with priority.
The controller does not apply its own QoS. The QoS support on the WLC gives the WLC the ability to apply the same priority that is set on the wire (or application).Therefore, the only action a WLC or AP will do is copy the value of the original packet to the outer header of the LWAPP packet. The whole purpose of the gold, silver, and bronze QoS options on the WLC is to perform proper QoS translations between 802.11e/802.1p UP values and IP DSCP values, which depend on the application or standard that is used. Once again, QoS on the WLC ensures that packets receive the proper QoS handling from end to end. The controller does not perform its own QoS behavior. The support is there for the controller to follow suit if QoS already exists and priority needs to be applied to wireless packets.You cannot have QoS only exist on the controller.
Reference: http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807e9717.shtml
Also;
Note WLAN client support for WMM does not mean that the client traffic automatically benefits from WMM. The applications looking for the benefits of WMM assign an appropriate priority classification to their traffic, and the operating system needs to pass that classification to the WLAN interface. In purpose-built devices, such as VoWLAN handsets, this is done as part of the design. However, if implementing on a general purpose platform such as a PC, application traffic classification and OS support must be implemented before the WMM features can be used to good effect.
Reference: http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch5_QoS.html#wp1021909
HTH
Amjad

Extend public wlan range with Express/Extreme?

I'm connecting a public wlan network from home with the iBook. Unfortunately the wlan signal strength is ok just close to the windows. I'd like to have a device to pick the incoming signal, strengten it and spread it to the appartment. Could I use one of the Airport products for this? The public wlan expects the clients to be configured to use dhcp. The wlan is open with no excryption. To enhance the signal quality it might be necessary to use an external antenna placed outside the window and attached to the device with a cable, but I'm not sure if this is needed. Suggestions anyone?
iBook Mac OS X (10.4.3)

An Express/Extreme cannot extend the range of a non-WDS base station. Even with a WDS base station, it would need to be configured to know about your Express/Extreme and use it as a WDS remote base station.
About the only thing I can suggest is to get a wireless-to-Ethernet bridge and connect a directional antenna to it, which would be pointed toward the nearest WLAN base station. You could then run Ethernet from the bridge to an Express or Extreme set up as an access point using a different wireless channel than the public WLAN, which would give you coverage within your residence. It would look something like this:
<PRE>
Public WLAN ))))) bridge --------- Express/Extreme ))))) iBook
</PRE>
(")))))" represents wireless, "-----" represents Ethernet)

A small networking / bridging issue

Hello everyone,
Here's my setup at my home :
Internet -> (eth0) Computer1 (eth1) -> Linksys (Wireless) ~~ (wlan0) Computer2 (eth0) -> IP Phone
My computer is my HTTP (apache2), DHCP (dnsmasq), Firewall (shorewall), DNS (dnsmasq). Computer 2 is my Freevo Box. I connected the IP Phone on it because it was right in the middle of the apartment and the line was clearer when we were far.
I got many headaches trying to fix this setup. Right now, I must create a new sub network for Computer 2 because wlan0 is in the 192.168.2.x but the dhcp is not working through so the eth0 of Computer2 is 192.168.3.1 and there's another DHCP server and shorewall to share Internet on Computer2.
Is there an easy way I can setup everything to be on the same subnetwork? And that, Comp1 will be accessible by TEL IP.
Thanks and have a nice day

Currently you have 2 routers in your network :
Computer1 routes between eth0(internet) and eth1 ( computer2)
Computer2 routes between wlan0 (wireless connection with computer1) and eth0 (ip phone).
* sharing internet is also a router function
Effectively you have 3 different subnets :
internet-computer1
computer1 - computer2
computer2 - ip phone
You will need to put a wlan bridge device with an ethernet switch at the location of computer2.
eth0 from computer2 AND the ip phone are then connected to computer1 on the same subnet.
If the linksys device you have now has switch ports, you can also connect your ip phone there.
The linksys WET54GS5 is an example of a wlan bridge with built-in switch ports.

Wireless Security Solution

I have heard a lot of talk about Wireless Security. And have at least a working knowledge of the two possible solutions, VPN and EAP. However, how to choose the best possible solution? VPN is expensive and still leaves me vulnerable to Impersonation attacks. EAP is cheaper but nonetheless leaves me vulnerable to Brute Force attacks. Of course the chances of someone walking into our building(s) and stealing a laptop with VPN software on it are probably greater than any of the aforementioned threats. I guess what I'm looking for is a "voice from above" to guide me on which solution I can take to my superiors and say "This is what we are going to do" and why solution X is better than solution Y.
Thanks!
STU...

Stu,
VPN vs WLAN: To what degree do you want to geographically control access? If WLAN is
attractive because youre looking at a LAN bridging solution, then VPN is over-kill. But if the distances are great (connecting from home) WLAN is out. In WLAN terms how big is your proposed "cell" (800m) or is the reach of users measured in miles? I can share with you an outline of WAP security controls for WLAN if what youre leaning toward is a LAN-bridging solution. That should help you get your arms around security for a Cisco-centric WLAN solution. I do security 100% of the time, and I just finished due-diligence for WAP WLAN bridging.
-Mark

VOICE WLAN BRIDGE

Similar Messages

Maybe you are looking for