[c-nsp] cisco wifi problem

Hegedus Gabor hegedus.gabor at euroway.hu
Wed Dec 3 07:51:05 EST 2008


Hi all!

I have a problem with my cisco 851w device.

When i try to connect to the wifi (eith correct key), this comes to the 
consol:

*Mar  1 2002 11:18:16.047 CET: *** Not encrypted dot1x packet from 
00c0.a8aa.3955 has been discarded
*Mar  1 2002 11:18:16.051 CET: *** Not encrypted dot1x packet from 
00c0.a8aa.3955 has been discarded
*Mar  1 2002 11:18:16.059 CET: *** Not encrypted dot1x packet from 
00c0.a8aa.3955 has been discarded
*Mar  1 2002 11:18:16.059 CET: *** Not encrypted dot1x packet from 
00c0.a8aa.3955 has been discarded

the authentication is okay cos the wireless pc tells me "connected"

and I don't know what is the problem... and how can i fix it.
here is the config:

no aaa new-model
clock timezone CET 1
clock summer-time CET recurring last Sun Mar 2:00 last Sun Oct 
3:00            
!                                   
!
crypto pki trustpoint 
TP-self-signed-4226531652                                
 enrollment 
selfsigned                                                         
 subject-name 
cn=IOS-Self-Signed-Certificate-4226531652                        
 revocation-check 
none                                                         
 rsakeypair 
TP-self-signed-4226531652                                          
!                                          
!   
crypto pki certificate chain TP-self-signed-4226531652        
 certificate self-signed 01                     
  30820344 ...                
quit                                                                   
crypto ctcp       
!                                                          
dot11 ssid 
Hrth                                                             
   authentication 
open                                                         
   authentication key-management 
wpa                                           
   
guest-mode                                                                   

   
infrastructure-ssid                                                          

   wpa-psk ascii 7 *****                                          
!                                                                               

no ip dhcp use vrf 
connected                                                   
ip dhcp excluded-address 192.168.0.1 
192.168.0.49                              
ip dhcp excluded-address 192.168.0.70 
192.168.0.255                            
!                                                                               

ip dhcp pool 
LAN                                                               
   import 
all                                                                  
   network 192.168.0.0 
255.255.255.0                                           
   default-router 
192.168.0.1                                                  
   lease 0 
2                                                                   
!                                                                               

ip dhcp pool 
Wireless                                                          
   import 
all                                                                  
   network 192.168.1.0 
255.255.255.0                                           
   default-router 
192.168.1.254                                                
   lease 0 
2                                                                   
!                                   
!                                                
ip cef                                          
no ip domain 
lookup                                                            
!                                                                               

vpdn 
enable                                                                    
!                                                                               

!                                                                               

!                                                                               

username asdaew privilege 15 secret 5 *****          
archive                                                                         

 log 
config                                                                    
  
hidekeys                                                                      

!                                                                               

!                                                                               

ip ssh source-interface 
Vlan1                                                  
ip ssh logging 
events                                                          
ip ssh version 
2                                                               
!                                                                               

!                                                                              

interface 
FastEthernet4                                                        
 no ip 
address                                                                 
 ip tcp adjust-mss 
1452                                                        
 duplex 
auto                                                                   
 speed 
auto                                                                    
 pppoe enable group 
global                                                     
 pppoe-client dial-pool-number 
1                                               
!                                                                               

interface 
Dot11Radio0                                                          
 ip address 192.168.1.254 
255.255.255.0                                        
 encryption mode ciphers 
tkip                                                  
 broadcast-key change 
100000                                                   
 ssid 
Hrth                                                                  
 speed basic-1.0 basic-2.0 basic-5.5 basic-6.0 basic-9.0 basic-11.0 
basic-12.0 0
 station-role 
root                                                             
!                                                                               

interface 
Vlan1                                                                
 ip address 197.1.155.250 255.255.255.0 
secondary                              
 ip address 192.168.0.1 
255.255.255.0                                          
 no ip 
proxy-arp                                                               
 ip inspect vlan_1_out 
out                                                     
 ip 
virtual-reassembly                                                         
 ip tcp adjust-mss 
1452                                                        
!                                                                               

interface 
Dialer0                                                              
 bandwidth 
512                                                                 
 ip address 
negotiated                                                         
 ip access-group 101 
in                                                        
 ip inspect dialer_0_out 
out                                                   
 ip nat 
outside                                                                
 ip 
virtual-reassembly                                                         
 encapsulation 
ppp                                                             
 load-interval 
30                                                              
 dialer pool 
1                                                                 
 dialer-group 
1                                                                
 no cdp 
enable                                                                 
 ppp authentication pap 
callin                                                 
 ppp pap sent-username **@** password 7 ****            
!                                                                               

ip route 0.0.0.0 0.0.0.0 
Dialer0                                               
ip route 197.0.0.0 255.0.0.0 
197.1.155.254                                     
!                                                                               

no ip http 
server                                                              
ip http authentication 
local                                                   
ip http 
secure-server                                                          
ip http secure-port 
50443                                                      
ip http timeout-policy idle 60 life 86400 requests 
10000                       
ip nat inside source list 180 interface Dialer0 
overload                       
!                                                                               

dialer-list 1 protocol ip 
permit                                               
no cdp 
run                                                                     
!                                                                                                               

end                                                                             


pls help thx Gabor


More information about the cisco-nsp mailing list