[c-nsp] Problem with DHCP over wireless on 1811W
Ingimar Jónsson
ingimar at hi.is
Wed Aug 19 06:49:18 EDT 2009
Hi all.
This is my first post to this list so please bear with me.
I'm trying to configure a 1811W to act as a DHCP relay for its wireless
AP.
The scenario is like this;
The 1811W is located in a remote office and forwards RADIUS and DHCP to
local servers.
DHCP is working on FastEthernet ports on the 1811.
Clients get RADIUS authentication on the AP.
No DHCP traffic comes from the AP on the 1811.
If I put a static ip address on a client connected to the AP, it can't
ping anything.
The config on the 1811W is like this (the crucial part I think):
dot11 ssid TEST
vlan 110
authentication open mac-address rad_mac
accounting rad_acc
guest-mode
infrastructure-ssid
!
dot11 aaa authentication mac-authen filter-cache
dot11 holdoff-time 300
ip source-route
!
ip cef
<SNIP>
ip dhcp-server X.Y.165.53
!
no ipv6 cef
multilink bundle-name authenticated
!
vtp mode transparent
!
vlan 110
name testing
!
ip ssh version 1
bridge irb
!
interface Loopback0
ip address X.Y.160.21 255.255.255.255
!
interface FastEthernet0
description Testing
ip address X.Y.69.167 255.255.255.0
no ip redirects
no ip proxy-arp
ip pim sparse-dense-mode
ip cgmp
ip ospf authentication
ip ospf authentication-key 7 135C470705051C737B
duplex auto
speed auto
!
interface FastEthernet1
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet2
switchport access vlan 110
!
<SNIP>
!
interface Dot11Radio0
no ip address
no ip route-cache cef
no ip route-cache
no dot11 extension aironet
!
encryption mode wep mandatory
!
encryption vlan 110 key 1 size 40bit 7 XXXXXXXXX transmit-key
encryption vlan 110 mode wep mandatory
!
ssid TESTING
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
channel 2437
station-role root
rts threshold 2312
!
interface Dot11Radio0.110
encapsulation dot1Q 110 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
no ip address
ip tcp adjust-mss 1452
shutdown
!
interface Vlan110
ip address X.Y.72.206 255.255.255.240
ip helper-address X.Y.165.53
no ip redirects
no ip proxy-arp
ip pim sparse-dense-mode
ip cgmp
no autostate
!
interface BVI1
no ip address
ip helper-address X.Y.165.53
no ip route-cache cef
no ip route-cache
!
no ip forward-protocol nd
ip forward-protocol udp bootpc
ip route 0.0.0.0 0.0.0.0 X.Y.69.254
!
<SNIP>
!
bridge 1 protocol ieee
bridge 1 route ip
Thanks
Ingimar Jonsson
More information about the cisco-nsp
mailing list