Cisco 1250 AP

[narinder.c]

Hi,

I seem to be receiving the message 'error VLAN 1 doesn’t exist on 'Radio1-802.11N 5GHz ' (see services>VLAN) whenever i try to enable it on the web portal Security> SSID Manager >  tick box Interface Radio1-802.11N5GHz.

I have checked and can confirm that it is ticked under services> VLAN

Not sure what could be causing this issue?

We have our office normal office SSID and a Guest SSID.

Also i have attached a screenshot of some settings that i need help with to understand.

Many thanks in advance

[Surendra BG]

Hi,

Whats the encryption that you are using on the A radio?? please paste the sh run from the AP.. lets see whats happening..

Will be waiting for your update!!

Regards
Surendra

[Surendra BG]

lemme tel u the thumb rule.. i  mean.. in IOS AP its always 1 VLAN = 1 Encryption = 1 SSID. its always 1:1:1  mapping.. make sure we have the same.. if not we see this error  message..

lemme know if this answered your question..

Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

[narinder.c]

Thanks for your response.

I have the office SSID and Guest Access SSID on separate VLANS.

Office is using open authentication with EAP Radius

Guest is using WPA2 key

Strange thing is I have another AP which is working fine and another one that has the same error message.

[Surendra BG]

Thanks for the update!!

It will be of great help if you could post the running config from the AP..

Regards

Surendra

[acadia]

I am having this exact issue trying to attach either of our SSIDs to the 5GHz radio on our new 1142N APs.  Attached below is the conf file.

!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 1140-test-ap
!
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
server 131.162.200.67 auth-port 1645 acct-port 1646
server 131.162.200.66 auth-port 1645 acct-port 1646
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
!
!
dot11 syslog
dot11 vlan-name guest vlan 17
!
dot11 ssid Acadia Open - Web Only
   vlan 17
   authentication open
   mbssid guest-mode
!
dot11 ssid acadia
   vlan 176
   authentication open eap eap_methods1
   authentication key-management wpa version 2
   mbssid guest-mode
!
!
!
username Cisco password 7 REMOVED
username admin privilege 15 secret 5 REMOVED
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
!
encryption vlan 176 mode ciphers aes-ccm tkip
!
ssid Acadia Open - Web Only
!
ssid acadia
!
antenna gain 0
mbssid
station-role root
!
interface Dot11Radio0.17
encapsulation dot1Q 17
no ip route-cache
bridge-group 17
bridge-group 17 subscriber-loop-control
bridge-group 17 block-unknown-source
no bridge-group 17 source-learning
no bridge-group 17 unicast-flooding
bridge-group 17 spanning-disabled
!
interface Dot11Radio0.32
encapsulation dot1Q 32 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.176
encapsulation dot1Q 176
no ip route-cache
bridge-group 176
bridge-group 176 subscriber-loop-control
bridge-group 176 block-unknown-source
no bridge-group 176 source-learning
no bridge-group 176 unicast-flooding
bridge-group 176 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption vlan 176 mode ciphers aes-ccm tkip
antenna gain 0
dfs band 3 block
channel dfs
station-role root
!
interface Dot11Radio1.17
encapsulation dot1Q 17
no ip route-cache
bridge-group 17
bridge-group 17 subscriber-loop-control
bridge-group 17 block-unknown-source
no bridge-group 17 source-learning
no bridge-group 17 unicast-flooding
bridge-group 17 spanning-disabled
!
interface Dot11Radio1.32
encapsulation dot1Q 32 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1.176
encapsulation dot1Q 176
no ip route-cache
bridge-group 176
bridge-group 176 subscriber-loop-control
bridge-group 176 block-unknown-source
no bridge-group 176 source-learning
no bridge-group 176 unicast-flooding
bridge-group 176 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
!
interface GigabitEthernet0.17
encapsulation dot1Q 17
no ip route-cache
bridge-group 17
no bridge-group 17 source-learning
bridge-group 17 spanning-disabled
!
interface GigabitEthernet0.32
encapsulation dot1Q 32 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.176
encapsulation dot1Q 176
no ip route-cache
bridge-group 176
no bridge-group 176 source-learning
bridge-group 176 spanning-disabled
!
interface BVI1
ip address 131.162.35.71 255.255.248.0
no ip route-cache
!
ip default-gateway 131.162.32.1
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server host 131.162.200.67 auth-port 1645 acct-port 1646 key 7 REMOVED
radius-server host 131.162.200.66 auth-port 1645 acct-port 1646 key 7 REMOVED
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end

Any help would be appreciated.

[Surendra BG]

From the configuration i can see the A radio (5Ghz) is in shut down state.. and also there is NO SSID MAPPED TO IT... please configure the below and lemme know if this helps..

interface Dot11Radio1
no shutdown

ssid Acadia Open - Web Only
!
ssid acadia
!

mbssid
!
encryption vlan 176 mode ciphers aes-ccm tkip

lemme know if this answered your question..

Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

[acadia]

Wonderful. I never caught that the interface was in shutdown mode. Thanks so much.

[Surendra BG]

Hi,

Thats nice to hear!! Did thst resolve the issue??

lemme know if this answered your question..

Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

[acadia]

It resolved my issue, for sure. Can't speak for the original poster.

[Surendra BG · Accepted solution]

Hi,

lemme know if that resolved the issue..

Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

[narinder.c]

Thanks for your help

[key2rajiv]

Surendra ,

I was going through your tech tip & tried the same via CLI . I  was also getting the same error and it worked after executing the same command in CLI ( in my case though interface was not admin shut ) . However when i tried doing the same through GUI :

Went to VLAN : Checked both the radios

Went to Encryption : Checked the encryption settings AES-CCM + TKIP

Went to SSID : When applied it still gave the same log

" VLAN 350 does not exist on Radio1 "

Is there any bug that it doesnt happen through GUI & same happens through CLI very easily ?

Please clarify .

Regards

Raj

[Surendra BG]

It should happen.. GUI is little slow compared to CLI.. that may be the reason

[key2rajiv]

Hi Surendra ,

Its not about slowness . Even after following all the steps & saving the changes , again it shows the same error log :

"VLAN 350 does not exist on Radio1 "