Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

AP and Clients on same VLAN

Hi guys, i'm having some connectivity problems with an 1231 AP, and i have some question for you:

Is ther a problem if the AP and the clients are on the same segment (vlan)? I have a configuration that looks like this:

interface Dot11Radio0

no ip address

no ip route-cache

!

ssid Control

!

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0

station-role root

!

interface Dot11Radio0.16

encapsulation dot1Q 16 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!

interface FastEthernet0

no ip address

no ip route-cache

duplex auto

speed auto

hold-queue 160 in

!

interface FastEthernet0.16

encapsulation dot1Q 16 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!

interface BVI1

ip address 192.168.16.250 255.255.255.0

no ip route-cache.

I know the recommendation is to have one vlan for administration and different vlans for clients, but is this just a recommendation or it just wont work?

Thanks in advance!!

1 REPLY
Green

Re: AP and Clients on same VLAN

It's "just" a security recommendation.

The AP acts as a bridge (~L2) and doesn't care what the L3 address (i.e., IP) it is assigned.

Aside from management, it doesn't need an IP address at all.

"Management" in this case also refers to authentication; if you are using (or are intending to use) an external authenticator (like RADIUS), then an IP address on the AP would be required.

Good Luck

Scott

121
Views
0
Helpful
1
Replies
CreatePlease to create content