Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Cisco 1300's won't associated.

I have one a Root Bridge. Its Software/Hardware is up.

The Non-Root Bridge never show Software/Hardware is up.

If I switch the Non-Root Bridge to AP they come up.

When the Non-Root Bridge boots the log says it is unable to associate.

  1. Triple checked password
  2. Latest version of OS.
  3. Even dedicated Non-Root to look just for this Root Bridge.
  4. Identical settings.

Why won't the interface come up - or is there a way to find WHY it won't associate? Some log?

 

 

31 REPLIES
New Member

One more question:With this,

One more question:

With this, how do the Install Root-Bridge and Install Non-Root-Bridge settings work? After I set them what do I do?

Thanks,

 

 

VIP Purple

few suggestion here1. Remove

few suggestion here

1. Remove all security settings & see whether those are associated in Open Auth

2. swap the roles (ie, current RB configure as NRB & current NRB as RB & see whether radio comes up)

 

HTH

Rasika

**** Pls rate all useful responses ****

I agree with Ras. Unwrap the

I agree with Ras. Unwrap the complexity first. Also post the config of both please.

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

I switched them both to

I switched them both to instal mode and all interfaces are up.

I am going attached requested files.

Remove "optional"

Remove "optional"

infrastructure-ssid optional

 

Remove 
 

dot11 ssid autoinstall
   authentication open 
   guest-mode
   infrastructure-ssid
!

Lets clean that up first 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Ok I did it on both.

Ok I did it on both. Association still not happening. I have attached the console log of its attempts.

 

 

I assume these are setup on a

I assume these are setup on a desk next to each other and they have antennas attached .. ?

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________

Repost your latest config on

Repost your latest config on both sides after the changes you did ..

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Right George. I removed any

Right George. I removed any config I did and put one in Bridge Install Mode and the other in Root Bridge install mode.

For the first time they are associating.

Now I would like to secure them, encrypt the traffic and get them out of install mode. Can you show me?

Attached are both show runs and logs from both.

Im concerned because it shows

Im concerned because it shows it was dropping in the logs. I think your issue was the infrastructure SSID command. Thats required, not optional.

Do you have plans on doing VLANs across this thing or just a simple layer 2 to pass traffic ? 

 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________

BTW - Install mode puts the

BTW - Install mode puts the radio signal strength in the CLI  / LOG .. This is why you see all those readings ..

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________

What security did you have in

What security did you have in mind ? EAP, PSK ? 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

WPA is what I am thinking.

WPA is what I am thinking. But whatever you think best. WPA with shared key.

WPA2 PSK .. is a simple and

WPA2 PSK .. is a simple and secure way ..


You need to config 2 spots ..

1) Under dot11 ssid you need to enter the below.. Add your key .. 

 

dot11 ssid (your ssid)
   authentication open
   authentication key-management wpa version 2
   infrastructure-ssid
   wpa-psk ascii XXXXXXXXX


2) drop into the radio you are using and put " encryption mode ciphers aes-ccm ". This tells the radio to use AES-CCM (WPA2 AES). If you are doing vlans then you need to do each vlan here. If not, then just drop this in under dot11radioX.

interface Dot11Radio1
 no ip address
 !
 encryption mode ciphers aes-ccm 

 

 

Do this to both sides.

 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

George the install created an

George the install created an SSID of tsunami.

Can I just use that?

New Member

And how to I turn off that

And how to I turn off that logging? I can't enter things very well!!

Does all this take it out of install mode?

take the radio out of install

take the radio out of install mode. 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Sorry for the dumb question:

Sorry for the dumb question: I only know how to do that in the GUI. Just uncheck it?

Since it is working ... I am a little worried or being cautious.

No worries. I almost never

No worries. I almost never use the GUI. try it .. 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Thanks George everything

Thanks George everything seems to be working great.

BOOM! Glad I could help ..

BOOM! 

Glad I could help .. rate this thread please if you find it helpful .. No pressure .. 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Done. Some time ago I posted

Done. Some time ago I posted a question on the Cisco forums: it took months for anyone to respond. This has completely changed. Great way of taking care of customers!
 

 Keep in mind we don't work

 

Keep in mind we don't work for Cisco. We are engineers and admins who monitor and donate our time here at CSC to help others. We use the ratings as bragging rights between us. You will normally see Steve, Scoot, Leo, Ras and myself cruising the mobility section of CSC.


Glad to worked out. Stop back if you have problems.

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Ok. I will tell my boss

Ok. I will tell my boss.

Thanks again.

 Tell your boss to rate some

 

Tell your boss to rate some post too! :)  LOL

 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
Hall of Fame Super Gold

You will normally see Steve,

You will normally see Steve, Scoot, Leo, Ras and myself cruising the mobility section of CSC.

Translation:  Be careful.  There are some posters who, unfortunately, work for Cisco but they don't post technical solution.  They post SALES solution only.  

 

How to determine one from the other?  Click on the name of the poster and look at his/her score.  Good Cisco staff poster has very high ratings.  

VIP Purple

Thanks George for clarifying

Thanks George for clarifying our position on voluntary support to this forum as non-cisco employees smiley

Mike:

Here is an config example if you want to configure EAP-FAST on your setup. May be useful to you

http://mrncciew.com/2013/11/09/wireless-bridge-with-eap-fast/

 

HTH

Rasika

*** Pls rate all useful responses ****

Oh, that too. Yes you can I

Oh, that too. Yes you can I guess. 

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

No VLAN's simple pass of

No VLAN's simple pass of traffic
 

128
Views
5
Helpful
31
Replies
CreatePlease to create content