Wireless VLAN question

I have two SSIDs on my Cisco 1242 APs.
On one of the SSIDs i have clients that will constantly broadcast data (required).
Will the brodcast traffic reach my other SSID? If so, is there a way to avoid it?
Will creating a separate wireless VLAN on my AP and assigning it to that SSID contain broadcast traffic so it does not flood my other SSID?
Thank you.

Broadcast is allowed on the same subnet, so yes, broadcast will affect everyone in that subnet. Creating multiple subnets is what allows you to control the broadcast. Here is a link for autonomous for creating multiple vlan's.
https://supportforums.cisco.com/docs/DOC-14496
Sent from Cisco Technical Support iPhone App

Similar Messages

CAPWAP Wireless VLAN in Routed Campus LAN

I am configuring CISCO Wireless LAN Controller in College campus. we have the following components
1. CISCO 4510R as core switch and a centralized WLC is connected to Core Switch
2. CISCO 3560 L3 switch at Distribution Layer Switch
3. CISCO LWAP 1142
I want to configure Wireless VLAN in a college campus. Wireless LAN. The requirement is to configure Distribution switch as L3 so that VLAN will not reach till the Core Switch. That is the Link between Distribution and Core Switch will be Layer 3 routed link and not a Trunk Link.
Since it is a routed back bone environment, VLAN is configured only in distribution layer switches. So, these configured VLAN will not reach core
switch.
With that said, is it technically possible to achieve the Wireless VLAN in this above proposed setup.?
Do I have to configure Trunk between Distribution Switch (APs are connected) and Core Switch (WLC is connected), to pass the Wireless VLAN in the trunk link?
Advance Thanks for reading and helping to get it clarified
SAIRAM

We are in the process of moving to a mostly routed Campus, and had similar questions and a few more. We will be using only EIGRP, with each enclave set-up as a stub. I was wondering if I can modify our wireless network to be strictly routed, and remove all the trunk/access configurations from the switch ports facing theAPs, and hard code (static) all of them to IP routed ports. We only have one WLC active, with one back-up. The WLC is facing our core switches in a LAG set-up. The network was originally set-up with all the dynamic interfaces for each AP set-up in a GLBP fashion between our two cores. Each AP had a dynamic interface created in the WLC and added to one AP group. All of our APs are now connected via ethernet to the wired infrastructure, so none of our APs are in true MESH fashion anymore. We use Microsoft DHCP to issue out IPs to our APs.
I was wondering if I can remove the dynamic interfaces from the WLC, and use EIGRP to sort of the routing of our wireless network. I would create L3 SVIs (multiple in some cases) on all the switches that APs are attached too, and modify each Microsoft DHCP scope to point to whatever AP model was used and to point to the WLC. Now, what I'm unsure on, how would this behave with no Native Vlan/User Vlans configured on trunk ports pointing toward the AP. I was thinking of using what was once used at the Native Vlan (subnet info), and using that same subnet to create a IP routed port facing the AP and modify the AP IP via the WLC to select static assign. I can place IP helper addresses under the routed port to face our DHCP server (not sure if this really matters, if I already place them under the user L3 SVIs). Before, I had a DHCP scope for the native and user subnet. Would the AP still be able to connect to the WLC correctly, if I delete the scope (used before for the native vlan), since it usually resolved the WLC IP via option 43 (it can use DNS instead). I would imagine so, since I will be placing these networks under EIGRP to advertise within our Campus, which has L3 reachability to the WLC. And under the user subnets, I would still configure the Microsoft DHCP scope to face the AP model and controller IP. There just woundn't be a scope for the subnet that use to be for the Native Vlan. For any new set-up, I would pre-provision the AP under a user subnet access port, and then hard code it within the controller a static IP, to deploy later at the new site. For routed networks, are dynamic interfaces really necessary on the WLC? As long as L3 is working as intended, and the user switch has reachability to the Microsoft DHCP server, then users should be able to pull IPs fine through, correct? I've tested already with a PTP bridge we have, and hardcoded the ports to IP routed ports, and advertised it via EIGRP, and haven't noticed any issues with the customers pulling new IPs. I wanted to gather more information before deploying this for across the board to our other types of wireless set-ups. I'm not using FlexConnect. I've moved most of our 1552e APs over to local mode recently, which have wired connections to the LAN.

Wireless vlan on Dell powerswitch 5448 to ASA5510

I am trying to create a wireless vlan on a Dell 5448 which uplinks to a subinterface on an ASA5510. My issue is I can't seem to get the switchport to trunk correctly between the vendor devices. Essentially I am trying to "fix" our wireless network that is bouncing since a new neighbor moved in with powerful RF signals in an already polluted space. Any suggestions would be appreciated.
Thanks!

I have built an interface of the 2106 for VLAN5 and the interfaces for the 2106 and the bridges are built as trunks and all vlans are allowed. If I plug in a laptop on the 3560 in the new building, and the port is assigned to VLAN5, I get an address and can surf out just fine. I will scrub the 2106 & 3750 configs and try and upload them. To further test I moved the DHCP scope onto the 2106 and my wireless client is able to get an address from the 2106, I can ping the interface on the 2106 (192.168.5.2) I just cant connect to the 3750 switch.

The old native vlan question....

Topic came up during troubleshooting a 3524XL sw.
I think my understanding of the native vlan concept is wrong.
I thought on a trunk port (Cisco device) that any packet transversing a trunk link (dot1q trunk that is) has a vlan tag applied on the egress port. As an untagged packet arrives on the port (prior to being sent out over the trunk), its is tagged with the native vlan (if its not assocated with any other vlan), then sent out the (egress) the trunked port.
But lately I have been reading that
"A native vlan is the untagged vlan on an 802.1q trunked switchport. The native vlan and management vlan could be the same, but it is better security practice that they aren't. Basically if a switch receives untagged frames on a trunkport, they are assumed to be part of the vlan that are designated on the switchport as the native vlan. Frames egressing a switchport on the native vlan are not tagged. This is the definition however more recent switch software often will allow you to tag all of the frames, even those in the native vlan. This gives some added security and allows the CoS bits to be carried between switches even on the native vlan. Let me know if you need further clarification."
From : https://learningnetwork.cisco.com/thread/8721
So this tells me that you can have a packet transversing a dot1q link w/o a vlan tag...then when it arrives on the other end its put in the vlan that is on that native vlan question. Is this correct?
If so, and a packet can transverse a trunk link w/o a VLAN tag applied, how does a sw detect (ingress) a native vlan mismatch?
Thanks!

Hi,
It's correct, the native vlan is not tagged by default on the trunk link but some platform can make you tag all traffic though even the native vlan.
The native vlan mismatch is detected through cdp.
Regards.
Alain.
Don't forget to rate helpful posts.

Wireless VLANs and Layer2/3 VLANs

Dear,
The vlans created for the mapping of SSID in embedded AP on cisco 1941 can be connected/communicated to the VLAN created on Layer2/3 switch.
Lets say i have created 3 vlans (say 200,201,202) for 3 ssid and the vlan created on switch (say 200,201,202) can be communicated?
Or these wireless vlan are purely for the mapping of ssid?. Thanks

yes that should be a trunk.. the below link is the configuration guide..
https://www.cisco.com/en/US/docs/routers/access/1900/software/configuration/guide/Software_Configuration.html
http://www.cisco.com/en/US/docs/routers/access/1900/software/configuration/guide/wlan.html
Regards
Surendra

SG300-10 VLAN Questions

My apologies if this has been asked before, but I have some questions regarding the setup of my new switch and network. I have never worked with switches before, so this is quite a learning experience. The picture above describes the current layout of my network. Here is how I have tried to set it up, so far.
VLAN 1 [Ports 1-4, Untagged, Trunk] (172.16.1.1/24)
Workstation A (Wired)
172.16.1.2/24
Server B (Wired)
172.16.1.3/24
VLAN 2 [Ports 5-8, Untagged, Trunk] (172.16.2.1/24)
Server C (Wired)
172.16.2.2/24
Server D (Wired)
172.16.2.3/24
Server E (Wired)
172.16.2.4/24
Server F (Wired)
172.16.2.5/24
VLAN 3 [Ports 9-10, Untagged, Trunk] (192.168.1.1/24)
Laptop G (Wireless)
DHCP via Router
Laptop H (Wireless)
DHCP via Router
Laptop I (Wireless)
DHCP via Router
Wireless Router
192.168.1.254/24
Now, my goal is to have all 3 VLANs be able to talk to each other but also have VLAN 1 access the internet, through the wireless router. In the future I would also like Server B to be able to expose services (http & ssh) to the outside. VLAN 2 shouldn't have internet access at all. I know I can add static routes to the wireless router, if need be. All three laptops, can access the internet through the wireless router, without any problems.
So my questions are:
1) Is there anything inherently wrong with the design of this network? If so, what could be changed?
2) Is VLAN 3 really necessary?
3) What would I need to do, to get the 3 VLANs communicating with each other?
4) What should the gateway be, to get VLAN 1 internet access?
5) What would I need to do, to expose Server B services to the outside?
6) What static routes do I need to add?
Thanks in advance!
   Jer

Hello Jeremy,
Thank you for your interest and patience.
You are on the right track here. However, several important changes must be made. Consider the following concepts:
The concept of a native VLAN. The link between the router and the switch must be part of VLAN 1. Otherwise, information from the router will not be distributed correctly on the switch due to the current PVID of 3.
The VLAN IP Interface (VLAN IP Address) identifies the subnet for the VLAN. Therefore, thinking of the switch as a router, you are correct that the default gateway for each client should be the respective VLAN interface on the switch. The switch will automatically route between directly connected IP Interfaces and their subnets.
However, in order for your clients to get to network that the switch doesn't know about, (the internet), there must be a default route to the router.
Additionally, in order for the router to forward information from the internet back to the VLANs on the switch, the router must know how to reach the different VLANs.
The folloing linked figure (Fig. 1) describes an appropriate sample setup. See here.
In this scenario, a SG300-10 is configured with 3 VLANs:
VLAN 1 - Default VLAN, used for management - 192.168.1.x/24 - Ports 9-10 - 1U - Trunk Mode
VLAN 2 - Servers - 192.168.2.x/24 - Ports 5-8 - 2U - Trunk Mode
VLAN 3 - Workstations - 192.168.3.x/24 - Ports 1-4 - 3U - Trunk Mode
VLAN 1 is used to communicate to the router. Therefore, the following default route must be added to the switch's configuration:
ip route      0.0.0.0      0.0.0.0      192.168.1.1
The switch will automatically build the routes between the VLANs local to the switch. Visualize Server C going togoogle.com. Its IP address is 192.168.2.2. Its default gateway should be the VLAN 2 IP Interface on the switch (192.168.2.254 in this example). Because the default route is configured, the switch will forward the internet request to the router. The router will then forward the request to your ISP out the WAN where it will eventually reach Google.
However, when the request comes back into the router, the router must know to route it to the 192.168.2.x subnet. So, in order for this to work, routes that accomplish the following must be configured on your router:
Subnet IP               Mask                    Gateway                                              Interface
192.168.2.1             255.255.255.0        192.168.1.254 (SG-300 IP Interface)         LAN
192.168.3.1             255.255.255.0        192.168.1.254 (SG-300 IP Interface)         LAN
As you have already discovered, there are several limitation to using a router that does not support 802.1Q tagging. Chiefly, your clients will not receive either DHCP or DNS automatically from the router. To mitigate this, you can do either of the following:
Run a DHCP server with multiple DHCP scopes on a device connected to your switch. You can then use Option 82 on the switch to route DHCP requests and DNS info between VLANs on the switch.
Statically configure IP and DNS information. You could enter Open DNS Servers or Google's DNS servers on your clients.
Ideally, you would want to use a router that supports 802.1Q tagging. In this figure here (Fig. 2), you can see the VLANconfiguration page for a Cisco RV180W, a very capable and affordable small business router that I highly recommend. Port 1 on the RV180W is configured as a trunk port and carries VLANs 1-3 to the switch. The clients automatically receive IP addresses and DNS information from the correct DHCP pool on the router.
Do not hesitate to contact us. We are always happy to help.
All the best,
-David Aguilar
Cisco Small Business Support Center
1-866-606-1866

Wireless Vlan

Hello -
I apologize if I am asking a question that has already been asked here, but I was hoping someone could provide me with some further clarification to help with my confusion on the subject.
My company is looking to deploy a company -wide WLAN solution with dynamic vlan assignment done by 802.1x (PEAP) using Radius as the authenticator. We already have a strong dot1x wired infrastructure, but being new to wireless deployment, I am getting hung up wireless dotq encapsulation.
Currently, there are about 30 different VLANs that users are placed in depending on their security-group membership in AD. When they want to use wireless as opposed to the wired network, can I associate all 30 something vlans to one 802.11 SSID? I find examples of tagging one SSID with one vlan, but not one SSID with multiple vlans using 802.1q tagging. Is this even possible.
Also, any clue why Aironets can't do VTP? From what it looks like, I have to go in and create all the vlans and bvi ints on each individual AP? We are deploying close to 75 APs to cover the entire company. Thanks for any help!

Thanks for the clarification. With that info, let me ask another question. How does dynamic valn assignment work with wireless, if at all. The need for all the vlans is mostly for security purposes. There is one central MIS department, supporting 6 different companies, and those 6 companies, have departments within them that also need to be isolated, hence the high number of vlans in this design.
I wouldn't want to turn on the beacon for all SSIDs, and maybe I would combine some of the Vlans for purposes of wireless, but could I have a Guest SSID associated with my guest vlan (10 in this case), and have the radius server return (again based on AD group association) another vlan. Would this redirect the wireless client to the proper SSID associated with the VLAN that they should be in, or do I have to mannually configure the particular user to connect to appropriate SSID?
I am basically trying to avoid having to image machines with the correct SSID preconfigured in the actual machine. We are using a 3rd party 802.1x supplicant and that would be a huge pain haing to preconfigure a dozen different images for each type of machine we give out.
Thanks again for all your help!

Wireless VLANs and WLC

Hello,
Designing a configuration for a Wireless solution. Have a 2951 with SRE-WLC and 4 port switch module. The documentation at
http://www.cisco.com/en/US/docs/wireless/controller/controller_modules/sre/installation/guide/wlcsreinst.html#wp1072942 arised couple of questions. Exact part of diagram from documentation is attached.
The question is that VLANs configured on SRE-WLC and ones configured on local switched belong to different subnets. Why? For example on SRE-WLC VLAN 20 - 55.20.0.0/24, but on switch - VLAN 20 - 20.1.1.0/24. Why?
Thanks!

Hi George,
Today i tried implementing APs on different VLAN than MGMT. Here is what I got:
1. New out-of-box APs didnt join to WLC once placed directly to APs VLAN. However they were able to join the WLC once I put them back to MGMT Vlan. They upgraded their IOS from WLC, joined compeletely. After that I moved them back to APs VLAN and they started to join. So, here is the procedure - Open new AP from box, connect it to MGMT VLAN, wait for joining to WLC and then move them to APs VLAN. This is a little bit strange. Also I noticed that they were unable to join teh WLC even on MGMT vlan if MGMT vlan is tagged on WLC and that tagged vlan is allowed on trunk. I have WLC on SRE, MGF trunk, VLANS and DHCP pools with option 43 configured. Will continue to investigate tomorrow.
2. What was the most difficult and problematic issue is that the LED was disabled on all APs after joining the WLC. I have been thinking that there is an error but only then found that APs by default turned off LED after joining the WLC. Issuing config ap led-status enable all on wlc solved the problem.
3. Also I regularly have been receiving
%PARSER-4-BADCFG: Unexpected end of configuration file.
during the AP joining to WLC. Dont know why. My APs are LAP1041n.
ANyways, will continue digging tomorrow, hopefully will find a stable solution. My ideal solution will be:
1. WLC Management is on MGMT VLAN - tagged vlan 20, static IP assignments.
2. APs on separate AP VLAN - tagged vlan 15 - dynamic IP assignments from DHCP pool on ISR with option 43.
3. Clients are on separate USERS VLAN - tagged vlan 10
The native VLAN will be other VLAN - VLAN 25.

Cisco Aironet 3502i and Virtual Wireless Controller- Question

Hello everyone,
As soon, I purchased two Cisco 3502i and Cisco 1142 however, two issue are that I don't have controller and smartnet. As my purpose, it using for Home Use but house with 2,500 Sq ft with two floor and new 24x24ft garage with two floor. I put two Cisco 3502i for garage and one cisco 1142 in house on second floor. Separated for multi media, gaming, streaming high resolution video, parts, and downloads programmings online. It will run with Cisco Catalyst Express 500 with 24 ports (4 POE) and two gigabit ports. In house, it have Dell Poweredge 2850, Cisco Catalyst Express 500 with 24 ports POE and 2 ports gigabit.
I thought to make my own developing with my first time using Wireless Controller. I wanted to try out with Virtual WLC on Dell Poweredge 2850 running ESXi 4.1.
Specs for Dell Poweredge 2850:
- 2x Intel Xeon Dual Core 3.8 GHz
- 4GB RAM (Will upgrade to 12GB soon)
- 2x 146GB and 2x 36GB SCSI
- 2x 1 Gbps built in and 4x 1 Gbps PCI-X
Developing with Untangle and pfSense to make it support with LADP and VLAN to both Cisco Express 500 using 4 gbps PCI-X. I have read the requipment list to use Virtual WLC but it seem met the requipment for my 2850. If someone offer me to get Virtual WLC and IOS from their, I accept to "borrow" it. I do go college which is Rochester Institute of Technology at New York and my major is Applied Computer Technology. I live here at Hampton Road, Virginia. Just in case if you might know about RIT. I just start to learning myself with Cisco books.
I have a question:
- Is there possible to get trial or full version of Virtual WLC?
- Is there possible to get Lightweight or Autonomous IOS for Cisco 1142 and 3502i?
- Does it supported Dell PowerEdge 2850?
- Does 3502i support Autonomous? (Not actually but I have researched around online about that it will work with 1262's IOS)
Thanks
Gage

Answers in-line...
I have a question:
- Is there possible to get trial or full version of Virtual WLC?
No. You will need a SmartNet contract (or a freshly purchased device) to obtain software from cisco. Nobody will provide this to you.
- Is there possible to get Lightweight or Autonomous IOS for Cisco 1142 and 3502i?
No. You will need a SmartNet contract (or a freshly purchased device) to obtain software from cisco.
Nobody will provide this to you.
- Does it supported Dell PowerEdge 2850?
Cisco doesn't go in to great detail regarding the actual Hardware requirements of the vWLC (as far as ESX Host requirements). Primarily, making sure you are running ESX 4.x/5.x is necessary. The vWLC provisions 2Gb of RAM and 8GB of thick provisioned storage, so if your host can accomodate I don't see any reason it wouldn't work.
- Does 3502i support Autonomous? (Not actually but I have researched around online about that it will work with 1262's IOS)
Yes, with the latest versions of IOS 15.2(2)JB, full functionality in autonomous can be achieved on the 1550, 3500, and 3600 series APs
http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/15.2_2_JB.html#wp355587

RV180 VLAN Question

My plan is to use VLAN1 for the internal private network and VLAN2 for free public wifi. My question is can I use a PC on VLAN1 to configure/manage my access points? There are no dedicated PCs on VLAN2.
Sent from Cisco Technical Support iPad App

Hi Terp,
I just finished setting up my RV180 with 2 VLANs: VLAN1 and VLAN5. VLAN1 is the management or default VLAN; while VLAN5 is my wireless guest VLAN.
My VLAN1 is 192.168.1.1. I have set all of the gateway settings according to our companies outside provider (phone and internet). The DNS settings are completed for both primary and secondary servers.
VLAN1 is where all our data files and office specific stuff is located. VLAN1 can access servers, users, and internet.
Under Networking>Multiple VLAN Subnets>
The DHCP Server for VLAN1 is set to NONE.
My VLAN5 is on ip address range 10.0.0.100-254/255.0.0.0. I have the DHCP Server set for this VLAN.
I did this so I did not get confused when checking Ipconfigs and now my free wifi users are clearly identified.
I am using a Cisco WAP321 as my access point. I have this hard wired to port 4 of my router. I do have a managed switch, but it is only on VLAN1 and therefore does not enter the equation.
I use a static ip address for my WAP in the 192.168.1.xx range. IPv4 Network Settings
I made sure under Wireless>Networks I made sure I have both VLANs with the same names and for VLAN1 I use the same security key as on the router.
Also I have Enabled Untagged VLAN on VLAN1 and Management on VLAN1.
I have DNS proxy enabled, BUT because this unit has a static ip address, I have to set my DNS server settings! This kept my guests from getting internet access for a few days. DON'T FORGET THIS
Anyway, everything works perfectly now.
Hope this helps.
Kaigh Taylor

Wireless VLANs

I have a question about the 800 16 wireless LAN you can make you that both 2.4GHz and 5GHz on?

pcfreak49 wrote:I have a question about the 800 16 wireless LAN you can make you that both 2.4GHz and 5GHz on?
A single AP can only broadcast a max of 16 SSIDs. You can however make many more SSIDs and VLANS but this would require AP groups.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

HP Officejet 6310 all-in-one wireless option questions

I have a HP Officejet 6300 All-in-One printer and I was using it with my wire network connection. I just moved to a new home, which I rent, and I do not want to make new wholes to past the cables then this is my question:
"I have a Cisco Linksys AE1000 high performance wireless-N usb adpater (dual band)" and I saw this product Female USB A to Male Ethernet RJ45 Plug Adapter (on Amazon that I think will be great if I can use it). Can I connect them to make my printer wireless?"
Please help.
Thanks.
BAK

Unfortunately that will not work for this printer. Wireless printing is set up through the printers software that you install on your computer. Since this printer is not a wireless printer, there will be no option to set it up wirelessly in the software, the only options will be ethernet or USB.
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

Wireless connection questions

Hi everyone, I'm considering going wireless soon, but I don't know a whole lot about it.
I have a few questions that maybe you could clear up for me.
First of all, it seems to me that the Airport Extreme Base Station isn't as fast as a lot of wireless routers I'm seeing sold these days. I've noticed some up to 108mbps, yet airport is only 54mbps.
So what I'm wondering is,
1) does the airport extreme card only work to connect to the airport base stations and not other wireless routers?
2) If the airport extreme cards do work with other wireless routers, is it a good idea to go with a faster wireless router than an airport extreme base?
3) What is the best wireless networking setup I should consider buying?
Thanks in advance,
-Merc

As mentioned the AEBS is 802.11G, just like many routers out there right now, so it is every bit as good as they are. The Airport card will connect to any 802.11G - or B - router out there, regardless of who makes it.
Keep in mind that those higher speeds that you see with a SuperG router are only going to be realized in your local network - that means between your computers - and not on the internet. Your typical broadband connection here in the States is about 4-6mbps, and even the slowest 802.11G connection is much faster than that at 54mbps.
Getting a faster router will only allow you to transfer files between computers faster. It will have no effect on your internet download speeds.

Hp 4580 wireless connection question

Can I connect this printer by usb To one pc, and ALSO connect it wirelessly to other computers on the wireless network in The house ?

There should be any issues with that kind of setup, I've had to do that in the past myself with a non-wireless PC. If you have any other questions, please let me know which exact model of 4580 you have, seems there are at least three different varieties.
Cheers,
*** If my reply was helpful, please click on the "Kudos Thumbs-Up" on the right, as a way to say "Thanks!".
If this reply also fixed your issue - please click the "Accept as Solution" button, so that others can find the same answer. ***

Somewhat off topic, wedding lighting and wireless lav. question

Hello everyone! This question is slightly off topic, but I'm desperate for an answer. I've been doing wedding videos for some time now and it's time to upgrade my setup. I'm currently in the market for a good, reliable wireless lavaliere mic, and a good quality on camera light. I use a panasonic DVX100b for all of my footage. For the light I'd like to spend about $400.00 ish or less, but I will spend more if the price jump dramatically increases the performance. I also have about $600 to spend on a wireless lav. system, again I will pay more if the jump in price brings a considerable jump in quality. Can anyone make any recommendations?
Thanks

Gotta go with the Sennheiser Evolution series as well. Although I can't say that the actual mics they ships with are the best, they're not bad and I've had very few issues with the range and reception.
And if you're shooting solo, aside from the mics, make sure you pick up a 2 or 3 foot XLR cable so that you have enough hose to allow you to hook the receiver on to your belt. Beats clipping it to the handle strap.
You can also get a little adapter for the DVX that will allow you to mount the mics on the camera hot shoe on the top of the handle. I'm sure you can get these for just about and wireless you buy.
rh

Wireless VLAN question

Similar Messages

Maybe you are looking for