I have one a Root Bridge. Its Software/Hardware is up.
The Non-Root Bridge never show Software/Hardware is up.
If I switch the Non-Root Bridge to AP they come up.
When the Non-Root Bridge boots the log says it is unable to associate.
Why won't the interface come up - or is there a way to find WHY it won't associate? Some log?
One more question:
With this, how do the Install Root-Bridge and Install Non-Root-Bridge settings work? After I set them what do I do?
few suggestion here
1. Remove all security settings & see whether those are associated in Open Auth
2. swap the roles (ie, current RB configure as NRB & current NRB as RB & see whether radio comes up)
**** Pls rate all useful responses ****
I agree with Ras. Unwrap the complexity first. Also post the config of both please.
dot11 ssid autoinstall authentication open guest-mode infrastructure-ssid !
Lets clean that up first
I assume these are setup on a desk next to each other and they have antennas attached .. ?
Repost your latest config on both sides after the changes you did ..
Right George. I removed any config I did and put one in Bridge Install Mode and the other in Root Bridge install mode.
For the first time they are associating.
Now I would like to secure them, encrypt the traffic and get them out of install mode. Can you show me?
Attached are both show runs and logs from both.
Im concerned because it shows it was dropping in the logs. I think your issue was the infrastructure SSID command. Thats required, not optional.
Do you have plans on doing VLANs across this thing or just a simple layer 2 to pass traffic ?
BTW - Install mode puts the radio signal strength in the CLI / LOG .. This is why you see all those readings ..
What security did you have in mind ? EAP, PSK ?
WPA2 PSK .. is a simple and secure way ..
You need to config 2 spots ..
1) Under dot11 ssid you need to enter the below.. Add your key ..
dot11 ssid (your ssid)
authentication key-management wpa version 2
wpa-psk ascii XXXXXXXXX
2) drop into the radio you are using and put " encryption mode ciphers aes-ccm ". This tells the radio to use AES-CCM (WPA2 AES). If you are doing vlans then you need to do each vlan here. If not, then just drop this in under dot11radioX.
Do this to both sides.
take the radio out of install mode.
Sorry for the dumb question: I only know how to do that in the GUI. Just uncheck it?
Since it is working ... I am a little worried or being cautious.
No worries. I almost never use the GUI. try it ..
Glad I could help .. rate this thread please if you find it helpful .. No pressure ..
Done. Some time ago I posted a question on the Cisco forums: it took months for anyone to respond. This has completely changed. Great way of taking care of customers!
Keep in mind we don't work for Cisco. We are engineers and admins who monitor and donate our time here at CSC to help others. We use the ratings as bragging rights between us. You will normally see Steve, Scoot, Leo, Ras and myself cruising the mobility section of CSC.
Glad to worked out. Stop back if you have problems.
Tell your boss to rate some post too! :) LOL
You will normally see Steve, Scoot, Leo, Ras and myself cruising the mobility section of CSC.
Translation: Be careful. There are some posters who, unfortunately, work for Cisco but they don't post technical solution. They post SALES solution only.
How to determine one from the other? Click on the name of the poster and look at his/her score. Good Cisco staff poster has very high ratings.
Thanks George for clarifying our position on voluntary support to this forum as non-cisco employees
Here is an config example if you want to configure EAP-FAST on your setup. May be useful to you
*** Pls rate all useful responses ****
Oh, that too. Yes you can I guess.