Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Help converting Cisco 871W Wireless configuration to Cisco 881W

I am in the process of trying to convert my Wireless setings over from our existing 871W to the new 881W routers.  I have found some documentation http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns430/ns855/white_paper_c11-492842.html but after reading it seems a) a bit confusing and b) doesn't cover how to handle multiple SSID's on different VLAN's.

My existing 871 configuration looks like this:

interface Dot11Radio0

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

no ip route-cache cef

no ip route-cache

!

encryption vlan 1 mode ciphers aes-ccm

!

encryption vlan 3 mode ciphers aes-ccm

!

broadcast-key vlan 1 change 3600

!

!

ssid <Home SSID>

!

ssid <Corporate SSID>

!

mbssid

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0

packet retries 32

station-role root

rts threshold 2312

rts retries 50

dot1x reauth-period 3600

no cdp enable

!

interface Dot11Radio0.1

description Corporate Data and Voice

encapsulation dot1Q 1 native

no ip route-cache

no cdp enable

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface Dot11Radio0.2

description Untrusted  Home

encapsulation dot1Q 3

no ip route-cache

no cdp enable

bridge-group 3

bridge-group 3 subscriber-loop-control

bridge-group 3 spanning-disabled

bridge-group 3 block-unknown-source

no bridge-group 3 source-learning

no bridge-group 3 unicast-flooding

!

interface BVI1

description Bridge Interface - Corporate Data

ip address x.x.x.x x.x.x.x

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat inside

ip virtual-reassembly

zone-member security in-zone

no ip route-cache cef

no ip route-cache

ip tcp adjust-mss 1260

service-policy input QOS_POL_REMARK_CORPORATE

!

interface BVI3

description Bridge Interface - Home

ip address 192.168.x.x 255.255.x.x

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat inside

ip virtual-reassembly

zone-member security home-zone

no ip route-cache cef

no ip route-cache

ip tcp adjust-mss 1260

service-policy input QOS_POL_REMARK_HOME

Can anyone lend a hand on how my 881W configuration might look like?  You can't create multiple bridge groups and route IP (you can only do that over bridge group 1).  I need to make sure that I can have two logically separated wireless networks (one for corporate and one for home) and that they get the right IP addresses from their right VLAN's.


Any input would be greatly appreciated.


Matt

2 REPLIES
Bronze

Re: Help converting Cisco 871W Wireless configuration to Cisco 8

I'm in the same boat, but have only one SSID to migrate (simple WPA1/WPA2 with PSK).   When I try to apply it to the Dot0 interface, I get this message:

%DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radio0 not started.

Partial config:

dot11 ssid BLAH
   vlan 1
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 XXXXXYYYYYZZZZZZZ
!

interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 mode ciphers tkip aes-ccm
!
ssid BLAH

!

bridge-group 1

!

This really looks like a bug to me.

Bronze

Re: Help converting Cisco 871W Wireless configuration to Cisco 8

Found a solution:

dot11 ssid BLAH
   no vlan 1
!

interface Dot11Radio0

encryption mode ciphers aes-ccm tkip

!

Boom!

ap#sh ip int brief dot0
Interface                  IP-Address      OK? Method Status                Protocol
Dot11Radio0                unassigned      YES NVRAM  up                    up    

3077
Views
0
Helpful
2
Replies
CreatePlease to create content