WRT54G as access point only

Hi!
I searched through the forums and could not find the exact answer I was looking for. 
I have a client who has an exisiting network.  They wanted to add wireless capabilities and bought 2 WRT54G for me to install as access points only.  Their exisiting network runs internal IPs of 10.0.0.x.  They want the wireless clients to get an IP in that subnet. 
Will the WRT54G do that?  I cannot seem to make it work.  It is easy to hang it off the network on the WAN port and DHCP 192.168.1.x addresses to wireless clients, but that is not what they want.
If I plug the network into the LAN side of the WRT54G, turn DHCP on the WRT54G off, they do not get IP addresses.
I am thinking that I need to use the WAP54G to make it simple, but am I missing something? 
Thanks!

Hi
Sorry, did not provide enough information.
The client has an exisiting network comprised of Cisco Routers and Switches.  DHCP is handled by the Cisco Router.  They bought the WRT54G without consulting with us first (we are the reseller and IT consultants) and want the WRT54G to act as a AP.  They want the wireless clients to get IPs handed out by the Cisco Router.  Basically they want the WRT54G to act like a WAP54G. 
The client thought that by turning off DHCP and plugging the wired network into the LAN side of the WRT54G, the wireless clients/traffic would just be passed to the Cisco router.  I dont think that will work. 
Here is a basic look at the network.
T1 line-----Cisco 2811 router---Cisco Switch-----wired clients and wireless clients.
I could PDF a Visio if that would help.
I am just thinking that this is a waste of time to try to get this to work when the WAP54G will do what we want.  But thought I would ask.  Also, the 2 APs are to serve wireless clients in seperate parts of the building.  They will have seperate SSIDs and will not be in a bridge mode.
Thanks
Chris

Similar Messages

  • Make WRT54G an Access Point Only

    I need to make my WRT54G an access point only. I tried information contained on Linksys site, but I can't seem to get it to work.
    I can access my wireless router and disable DHCP fine. But when I try to change the wireless routers IP, I'm instructed to refresh/renew. Once that's done, I can no longer access the router at the old or new address.
    My Netgear wired router has a range of 192.168.0.1 to 192.168.0.50.
    I changed the WRT54G to 192.168.0.49, but I can't access it.
    I should note that my Netgear wired router already has a Cisco router attached to it for home access to my company via VPN and VOIP. Also, the wireless router is connected to the Netgear router via a linksys switch, but I don't think any of that should really matter ....

    Microsoft Windows [Version 6.0.6000]
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.
    C:\Users\Dantheman2865>ipconfig /all
    Windows IP Configuration
    Host Name : NotebookDAN
    Primary Dns Suffix :
    Node Type : Hybrid
    IP Routing Enabled : No
    WINS Proxy Enabled : No
    DNS Suffix Search List : mshome.net
    Wireless LAN adapter Wireless Network Connection:
    Connection-specific DNS Suffix . : mshome.net
    Description : Broadcom 802.11b/g WLAN
    Physical Address : 00-1A-73-3D-58-22
    DHCP Enabled : Yes
    Autoconfiguration Enabled : Yes
    IPv6 Address : 2002:2ab7:5c22:8:1094:38ae:77d:c2d8(Prefe
    rred)
    IPv6 Address : 2002:2ac5:ca4a:8:1094:38ae:77d:c2d8(Prefe
    rred)
    Site-local IPv6 Address : fec0::8:1094:38ae:77d:c2d8%1(Preferred)
    Temporary IPv6 Address : 2002:2ab7:5c22:8:35de:c0e8:c3a2:4946(Pref
    erred)
    Temporary IPv6 Address : 2002:2ac5:ca4a:8:35de:c0e8:c3a2:4946(Pref
    erred)
    Link-local IPv6 Address : fe80::1094:38ae:77d:c2d8%9(Preferred)
    IPv4 Address : 172.16.3.92(Preferred)
    Subnet Mask : 255.255.240.0
    Lease Obtained : Monday, November 26, 2007 7:25:37 PM
    Lease Expires : Wednesday, November 28, 2007 1:59:55 PM
    Default Gateway : fe80::68a5:25b6:ef52:9a35%9
    192.168.1.1
    172.16.0.1
    DHCP Server : 172.16.0.1
    DHCPv6 IAID : 151001715
    DHCPv6 Client DUID : 00-01-00-01-0E-15-11-5D-00-1B-24-13-5B-36
    DNS Servers : fe80::68a5:25b6:ef52:9a35%9
    192.168.0.1
    Primary WINS Server : 42.0.0.1
    NetBIOS over Tcpip : Enabled
    Ethernet adapter Local Area Connection:
    Connection-specific DNS Suffix : mshome.net
    Description : NVIDIA nForce Networking Controller
    Physical Address : 00-1B-24-13-5B-36
    DHCP Enabled : Yes
    Autoconfiguration Enabled : Yes
    IPv6 Address : 2002:2ab7:5c22:8:d89c:9395:3740:16fe(Pref
    erred)
    IPv6 Address : 2002:2ac5:ca4a:8:d89c:9395:3740:16fe(Pref
    erred)
    Site-local IPv6 Address : fec0::8:d89c:9395:3740:16fe%1(Preferred)
    Temporary IPv6 Address : 2002:2ab7:5c22:8:e0b9:21d0:4a49:ac2c(Pref
    erred)
    Temporary IPv6 Address : 2002:2ac5:ca4a:8:e0b9:21d0:4a49:ac2c(Pref
    erred)
    Link-local IPv6 Address : fe80::d89c:9395:3740:16fe%8(Preferred)
    IPv4 Address : 172.16.2.35(Preferred)
    Subnet Mask : 255.255.240.0
    Lease Obtained : Monday, November 26, 2007 10:22:35 PM
    Lease Expires : Wednesday, November 28, 2007 2:14:30 PM
    Default Gateway : fe80::68a5:25b6:ef52:9a35%8
    172.16.0.1
    DHCP Server : 172.16.0.1
    DHCPv6 IAID : 201333540
    DHCPv6 Client DUID : 00-01-00-01-0E-15-11-5D-00-1B-24-13-5B-36
    DNS Servers : fe80::68a5:25b6:ef52:9a35%8
    192.168.0.1
    NetBIOS over Tcpip : Enabled
    C:\Users\Dantheman2865>
    I'm sorry, I hope this helps
    Message Edited by Dantheman2865 on 11-27-2007 05:04 PM

  • Using WRT54GR as a Wireless Access Point only

    I have a WRT610N as my main router. I want to use an existing WRT54GR purely as a wireless access point and ethernet switch. Any suggestions on how best to do that so I can still access the WRT54GR to make configuration changes? Right now I have the network functionality working by simply not using the Internet port on the WRT54G but by going to 192.168.1.1 I can only get to the WRT610N.

    (Restarting this thread).
    I made the change you suggested and statically assigned 192.168.1.200 to the WRT54GR. I can reliably access it through this IP address. I connected it to the rest of my network by using one of the 4 switch ports (not the Internet port). I disabled DHCP on it and configured the Wireless settings to be the same (same SSID and Security Settings) as my other wireless router.
    What I'm finding is that devices in my house won't assoicate with it. I tried changing the SSID to a different value; devices were able to see the new SSID but when I entered the pasword they told me that no DHCP server could be detected. A wired device that I plugged into another of the 4 switch ports on the WRT54GR was able to pick up an IP address from the main router just fine so I know that basic connectivity is OK.
    To achieve what I want (i.e. the WRT54GR just acts as a wireless base station to extend wireless coverage in the house), do I need to connect the WRT54GR to the rest of the network using the Internet port rather than a switch port? If so, what configuration settings do I need to set up so that all the devices can get their IP address from the main router?

  • WRT54G as access point

    Hey there first post I have a wrt54g wireless router all firmware is up to date I also have the befsr41 just a regular wired router I've had it set up where the wired router is getting the dhcp and connecting to my wired computer and xbox I have a ethernet cable going from the wired router to port 4 in my wireless router with the router dhcp server set to disabled. this made it work great as an access point until now. At this point I have my wired computer wired right into port 3 of the wireless router and is connecting great however the ever important wireless function of the wireless router is now not working i've updated the firmware and tried resetting to factory settings and everything but it will still only work through the wired ports. My wireless laptop says that it is connected to the wireless network but it says "local only". now i've tried (in cmd) to ping the router wirelessly and it keeps saying transmit failed, error code 1231. does anyone have any suggestions? has the wireless portion of my wireless router failed? thanks =-eric-=

    Use static/ Manaul Ip address on wireless networkconnection.....
    Use Ip address .... subnet mask & DNS numbers ....
    Reboot the computers & see if it works ....

  • WRT54GS as Access Point

    Is there a way to set up the WRT54GS as an access point for the WRT300N? I just recently purchased the WRT300N and I was looking to extend my signal without purchasing the wireless repeater. Can anyone help with this?

    no...the linksys routers would only work as wireless access points and not repeaters / bridge

  • WRT54G as Access Point & Intermittent Connectivity

    So I followed the advice found here
    http://forums.linksys.com/linksys/board/message?board.id=Wireless_Routers&message.id=26177
    Hooking up a wired router to my WRT54G Router, which I am trying to use as an access point. I've set my LAN IP to 192.168.1.2, disabled DHCP, cables plugged into LAN ports, not the WAN port.I also changed it to Router Mode instead of gateway mode.
    The problem is my wired router is my landlord's, and I don't have access to it. Anyway, I can usually connect, but sometimes it disconnects repeatedly, and it seems like i can't keep a connection for more than 5 minutes.
    The problem doesn't seem to nearly as bad when I'm plugged directly into the wall (but there have been a couple times when I've gotten disconnected).
    My theory is that I may be getting something mixed up with regards to my assigned IP address. When I'm plugged in i'm 192.168.1.108, but when I connect to the wireless, i'm almost always 192.168.1.100, even though there's only one DHCP server on the network. (this is just a guess, though)
    Any advice you can give would be greatly appreciated. THANKS!

    I've updated the router's firmware I forgot to mention that in the original post. Are you sure regarding the "gateway mode", the little help blurb on the routers settings says that gateway should only be used when the router is the part of the network that deals directly with the wider internet. I am pretty sure I've tried it in both modes and was having this problem, because it was definately Gateway

  • Trying to set up WRT54G as access point

    I also put this on the Access Point Forum
    Situation:
    Using a cable modem.
    Installed a WIRED SMC barricade router next to the cable modem (just plug & play).
    Have 1 PC connected directly to port 2 of the SMC (PC works fine).
    Ran a cable from port 1 of the SMC to downstairs.
    Connected cable to the WRT54G.
    Via wireless, went into the WRT54G and disable DHCP (and saved settings).
    At this point I have can access the internet.
    But if I reboot my pc, I can see the WRT54G but do not get internet access nor even access it using 192.168.1.1 (I have to reset the WRT54G and then I can access it).
    Anyone know what I'm doing wrong?
    BTW, the SMC IP address is 192.168.2.1, so the only setting I change in the WRT54G was disabling the DHCP.
    Thanks
    Keith

    OK, if the SMC's IP is 192.168.2.1, then you would assume your IP would also be on that network. Are you performing a hard reset of the WRT (to factory settings)? If so that would probably explain why you can access 192.168.1.1, because factory rest is to enable DHCP on the 192.168.1.0 network, and your PC may be getting an IP from there before the SMC.
    Are the ports on the SMC router just switch ports (same as the ethernet ports on the WRT? If so, which port on the WRT are you connecting to the SMC? If you use one of the ethernet (not the WAN) ports on the WRT, and set it's IP in the 192.168.2.0 network you should be good. Disable DHCP on the WRT, and put it in Router mode, rather than Gateway mode (it doesn't really matter if you are not using the WAN port, as allyou are using are the ethernet ports and the wireless.)
    Your DHCP requests will still get passed over to the SMC.
    Message Edited by kevj on 02-09-2009 10:06 AM
    Tomato 1.25vpn3.4 (SgtPepperKSU MOD) on a Buffalo WHR-HP-G54
    D-Link DSM-320 (Wired)
    Wii (Wireless) - PS3 (Wired), PSP (Wireless) - XBox360 (Wired)
    SonyBDP-S360 (Wired)
    Linksys NSLU2 Firmware Unslung 6.10 Beta unslung to a 2Gb thumb, w/1 Maxtor OneTouch III 200Gb
    IOmega StorCenter ix2 1TB NAS
    Linksys WVC54G w/FW V2.12EU
    and assorted wired and wireless PCs and laptops

  • Port forwarding / PPPoE setup / WRT54GS as access point

    Hi,
     i have 3 questions as u can understand from the subject
    First's lets make a rough sketch of the net topology
    Internet --------  DSL Modem ------- WRT54GS  >>>> 2 wireless laptops
                                                                   |
                                                                   |
                                                                   |
                                                        Wired Desktop PC
    My DLS Modem is a Siemens Speedstream4200 connected to WRT54GS using an Ethernet cable. WRT54GS is v7.0 using firmaware v7.50.0. The 2 laptops run Vista Home Premium and my Wired Desktop Windows XP Pro.
    So, now to the questions:
    A. I tried using PPPoE in the Internet connection box of the WRT54GS, i supplied the username and pasword of my ISP but i couldn't establish an internet conection. Of course i didn't turn off the modem, router and pc as pointed out in topic with AnwerId = 2210 which i found today, will do that tonight, so hopefully there will not be a problem. I just switched from DHCP to PPPoE.... so, there might not be a prob after all... (is turning on and off the hardware that substancial ? )
    B. I am currently using DHCP as the preferred Internet connetion type. I tried to forward a port to use with uTorrent. I gave my desktop pc a static IP (192.168.1.199), forwarded the port to the corresponding area of the router's page (port 59876, both protocols, enable) and unchecked the Block anonymous requests. Had no luck . Thing is that i am not sure about the TCP/IP settings i have used...
    Static IP :               192.168.1.199
    Subnet   :               255.255.255.255 (default value)
    Default Gateway :  192.168.1.1  (the router's IP)
    Preffered DNS    :  62.178.90.17
    Secondary DNS :   62.178.90.18 
    The DNS's are the ones that my ISP gave me. Are these the ones that i am supposed to use here or should i use my routers IP as a DSN? (my DSL modem is accessed in the network at http://192.168.254.254)
    C. I have also a second WRT (currently not connected) and i want to use it as an access point (extending the range of my network in a building)
    I am thinking of something like the following
    Internet --------  DSL Modem ------- WRT54GS  >>>> 1 wireless laptops (floor 2)
                                                                   |
                                                                   |   (this is an ethernet cable)
                                                                   |
                  (this is an access point)   WRT54GS >>>> 1 wireless laptop (floor 0) 
                                                                   |
                                                                   |
                                                        Wired Desktop PC
    What do i have to do ? connect the 2 WRT54GS, make sure that both WRT54GS have the same SSID and use different channels? What about port forwarding ? i guess i will have to forward the IP of the access point to the router and the IP of my PC to the access point ? ? ?
    Well, thx at least for your time to read my email
    theodore

    A. If you cannot set PPPoE on the WRT although it is supposed to be required for your DSL connection then probably the SpeedStream is operating as router as well. That's why you can use internet connection type DHCP. You should post the full information on the Status tab of the router. It will show how you are connected to the SpeedStream and whether it is a router or not. Otherwise you could also do this test. If both IP addresses are not identical then you have a router/modem. You should consider putting the SpeedStream into "bridge" mode. In bridge mode it operates like any normal modem. Then you should be able to configure the PPPoE connection on the WRT.
    B. Obviously, if your modem is also operating as gateway router port forwardings won't work unless you configure port forwardings on the modem/router as well. The modem/router is the device with the public IP address. You have to forward ports from the Speedstream to the WRT WAN IP and on the WRT to the computer in question. You should assign a static IP address in the internet connection settings of the WRT (for similar reasons like for the computer). As this is complicated this would be another good reason to put the modem into bridge mode. Then the WRT is connected to the internet and you only have to configured port forwardings on the WRT.
    C. See here. For a roaming network wireless settings on both WRTs must be identical except for the channel numbers. If you set up the second router like suggested there is no port forwarding on the second WRT.
    Message Edited by gv on 10-24-2007 05:01 PM

  • When using EA6400 as an access point only, certain features lost

    I've set up my EA6400 and have it connected to my Verizon MW424WR(Gigabit) and it works fine as an access point and the Twonky Server uses the USB drive I have attached to the router's USB port. Problems:
    1)I can not use the linksyssmartwifi link for management, I have to use the IP(set for 192.168.1.50) for this. When trying to register/login, the Linksys end is trying to find a Linksys router but can not and will not allow any action.
    2)Although Twonky will use the attached HD, I can not share the device over the home (Windows) network. I've tried various incantations of the IP \\192.168.1.50\(whatever share name I can think of) with no avail.
    3)Using the Linksys admin, the Device List is incomplete. Devices connected wirelessly  such as my iPod, Roku, Sony Media Player and WD HD TV Live do not show as wirelessly connected and do not have an IP listed.
    4)Is there any point in using the Media Prioritization settings since no routing is done by an access point. Or will it actually prioritize the wireless connection.
    BTW, the Verizon router can not be set in bridge mode so I have to use the router as an access point to accomplish what I wish.
    TIA,
    Randy

    Some applications and router features require the use of the WAN port. If the router is set up for LAN to LAN AP mode only, then those features won't work in this mode. Only Router mode. 
    If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>http://www.practicallynetworked.com/networking/fixing_double_nat.htm and http://computer.howstuffworks.com/nat.htm If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Then connect the router in router mode using the WAN port to the ISP modem, then features and apps should work.
    tduong44 wrote:
    I am having the same problem, not being able to use ANY apps like USB drive, FTP, etc when setting the device in bridge mode because I want to access the drive outside of my network using port forwarding.  Contact Linksys/Cisco support and was told that I needed to setup the Verizon router in Bridge mode..   That was it, that was the solution... AND also to check with provider for instruction how to.. WTH kind of support is that>??

  • [SOLVED] [...] to an access point only immediately after booting.

    I recently got a new router (D-link DIR-615E3), and installed dd-wrt on it. Now, the wired connection works perfectly, and so do wireless connections from any device but my computer.
    The connection works well if I connect it right after booting,
    root /home/martin # iwconfig wlan0 essid Hochelaga
    root /home/martin # iwconfig wlan0
    wlan0 IEEE 802.11bgn ESSID:"Hochelaga"
    Mode:Managed Frequency:2.462 GHz Access Point: B8:A3:86:4B:67:D0
    Bit Rate=36 Mb/s Tx-Power=15 dBm
    Retry long limit:7 RTS thr:off Fragment thr:off
    Encryption key:off
    Power Management:on
    Link Quality=70/70 Signal level=-23 dBm
    Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
    Tx excessive retries:0 Invalid misc:1 Missed beacon:0
    Yet, if I try to do it again at any other time, the video card doesn't associate itself with the access point.
    root /home/martin # iwconfig wlan0 essid off
    root /home/martin # iwconfig wlan0 essid Hochelaga
    root /home/martin # iwconfig wlan0
    wlan0 IEEE 802.11bgn ESSID:"Hochelaga"
    Mode:Managed Access Point: Not-Associated Tx-Power=15 dBm
    Retry long limit:7 RTS thr:off Fragment thr:off
    Encryption key:off
    Power Management:on
    I feel as if I'm missing something obvious, yet I've been trying for a long time and I didn't find any solution. Can someone help me in here?
    Here's is my video card information.
    root /home/martin # lspci | grep Wireless
    04:00.0 Network controller: Atheros Communications Inc. AR9285 Wireless Network Adapter (PCI-Express) (rev 01)
    Last edited by mFixman (2012-04-14 03:24:25)

    skunktrader wrote:The ath9k driver is broken in 3.3.1 - either wait for 3.3.2 (a few days) or downgrade.  Search the forum -- there are MANY threads with workarounds
    Indeed, that was the problem.

  • Permit mac-address only port 80 on access-point 1240

    Hi,
    how can I permit forward an mac-address which connect at access-point only
    surf in Internet ?
    Does anyone advice me an a configurations or document about ?
    Best regards
    Lorenzo

    hiiiii...
    permit

  • WRT 110 as an access point

    I have two WRT 110 and I am using one as a wireless router and I wish to use one as a wireless access point, but cannot get them to connect. I have tried it manually and using the wireless protected setup. Is there anything that needs to be cofigured in the router to use it as an access point only? Any help or advice would be appreciated.

    You can not connect them wirelessly, you must connect via Ethernet cable.
    You may go here to find out how to cascade two routers.

  • Amazon Q&A : E2500 - Setup as access point

    Does this work as a wireless access point?

    Yes, it does. This is a router with built in wireless access point. It is also possible to use the router as plain access point only.

  • Filter access points by MAC address

    I've got a constant problem with ad-hoc networks (set up accidentally by various users around me--I am a faculty in residence living on a college campus) with the same SSID as the (unsecured) network that I am trying to connect to with my PB G4 running 10.4.3. When the signal strength from the ad-hoc is stronger than from the real access point, only the ad-hoc shows up in my Airport drop down menu (i.e., all the entries are listed as "Computer to computer"). I can connect to the access point via iStumbler, but it's a nuisance to do that every time and anyway my PB keeps on dropping that connection in favor of the stronger signal of the ad-hoc.
    I'd like to be able to do one or more of the following:
    (1) Prohibit my PB from connecting to ad-hoc networks even if they happen to have the same SSID as my preferred network. (And, no, none of the options in the Network control panel seem to help.) I would have no problem with completely forbidding my PB from connecting to ad-hoc networks as I have no need for such connections for my PB.
    (2) Employ a whitelist of MAC addresses that I want to allow my PB to connect to. (A blacklist is not as useful, since the MAC address of the ad-hoc keeps on changing. But I suppose I could run some script in the background that logs the ad-hocs current MAC address and feeds it into the blacklist.)
    (3) Find out the machine name (which is typically a student's name) or other identifying info of the machine that is originating the ad-hoc network, so I can talk to the person who is originating the network (it violates campus policy, and is a nuisance to a lot of people). I tried locating the network source with a directional antenna, but failed. (We've got a high density here, and I thought I talked to all the folks around where the signal seemed strongest.)
    Thanks for any suggestions!
    Alex Pruss

    Chances are, there is no bug.
    You likely have the Default Rule in Timed Access set to Unlimited. So, any device that provides the password will be allowed to connect at all times.
    If you do not want a device to be able to connect by simply entering the password, you must first change the Default Rule to No Access. Then, a device will only be allowed to connect if your have an entry using the MAC address of the device and the time period specified that it will be allowed to connect.

  • Help required to implement Cisco 2504 WLC and 1042 Access Points

    Hi,
    My name is Vidya Sagar. I am new to Wireless technology. We are planning to implement Wireless in our office. I have given the requirements below. Kindly go through the details and let me know how to start.
    We have purchased Cisco 2504 Wireless Controller (One) and Ciscon 1042 Access Points (Five). At present I am going to use 3 access points only.
    I have attached a simple diagram of our office network. We have more than 30 VLANs configured in Core Switch, we are planning to give wifi access to only 3 VLANs.
    1. VLAN 121 ( IP Segment - 10.52.121.0 /24)
    2. VLAN 116 ( IP Segment - 10.52.116.0 /24)
    3. VLAN 100 ( IP Segment - 192.168.100.0 /24) (Guest)
    Please give me a implementation plan to do this. I would like to use LDAP or ACS for authentication purpose.
    Regards,
    Vidya Sagar

    Lets just do this simple first before you start using ACS as that will require a certificate installed on the ACS for using PEAP.
    So first off, the WLC we will say is in vlan 10. When you are going through the startup wizard, make sure you define the vlan tag to 10 on the management interface. Make sure your virtual interface is an IP address that is not routed in your network, like an out of band IP.
    Make sure the WLC time is correct or use NTP!!!!
    Now you should be able to http or https to the WLC. I would upgrade the code to v7.4 and install the FUS image. Please reference this link for the upgrade procedure. You don't have to upgrade now... I would wait till you get everything working first.
    http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn74.html
    Now I would connect the APs on the same vlan as the WLC for now. Make sure there is dhcp on that subnet. Once the APs have joined, then you can move them to any subnet you want. Since you don't have many APs it would be okay to leave them in the same vlan as the WLC management or out them on any other vlan you choose. The APs will be connected to an access port NOT a trunk port!!!!
    The WLC will need to be connected on a dot1q trunk port only allowing vlans 10,100,116,121. The 2504 running v7.4 will support LAG (etherchannel). Any ways, your switch port should look like this for example only
    Interface gigabit1/0/1
    description WLC2504
    switch port trunk encapsulation dot1q
    switchoort mode trunk
    switch trunk allowed vlans 10,100,116,121
    spanning-tree portfast trunk
    channel-mode group 10 mode on << only for v7.4 if you use lag
    Don't connect all four ports right now, just port one!!!!
    Your Guest vlan, you will need to create an ACL to block traffic from accessing the internal network. You might want to allow dhcp and DNS bit I would leave it open first until you can verify everything is working.
    Now on the WLC you need to create a dynamic interface for vlan 100, 116, and 121. If you click on the Controller tab in the GUI and click on interfaces on the left hand side, that will take you to where you can add/delete/modify your interfaces. When creating these interfaces, make sure you add the dhcp server IP address for the primary and or backup.
    Now that you have your dynamic interfaces created, its time I create your SSID. Now click on the WLAN tab on the GUI and click on WLAN and then on the too right select Create New and then click go. Select WLAN on the drop down menu and then for the profile name I would use the SSID name also for simplicity.lean e the WLAN id to 1 for this and 2 for the next and so on. After defining these and clicking Apply you can now define your SSID. On the General tab, enable the status and leave the radio policy to all for now, you can decide later what you want to use. Choose your interface you wan to place this SSID on and enable Broadcast SSID for now and leave everything else alone. Now click on the Security tab and on the layer 2 Security, leave it at WPA + WPA2, only check WPA2 Policy and for WPA2 encryption choose AES only. Now go to the bottom of that screen and choose PSk. We will do pre shared key for now so you get to understand the setup and make sure everything is working first. Now on the PSK format, choose ASCII and put your pre shared key in the input box. Make this simple to for testing. You don't want to put in symbols or anything like that. When you are don with that, check apply on the top right and test.
    Now you can repeat this with your other SSIDs just to test. Your guest network you can leave open for now to test open authentication.
    Here are some links for the WebAuth feature:
    https://supportforums.cisco.com/docs/DOC-13954
    http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080b1a506.shtml
    Now if you want to use ACS with PEAP, here is some links for that:
    https://supportforums.cisco.com/videos/2499
    http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080bd1100.shtml
    https://www.google.com/url?sa=t&source=web&cd=8&ved=0CFQQtwIwBw&url=http%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DWk_bRdmsQlA&ei=_BEyUeCYM8TdqAHHsICAAw&usg=AFQjCNF8PiVBQK1Kipb4j8AzD153bKtmgA&sig2=smHhNVmCr2of2NzbnDhGmw
    Well that is it, hopefully you can get the wireless up for testing and verifying everything works!
    Sent from Cisco Technical Support iPhone App

Maybe you are looking for