Cisco Wireless :: 1142 - Aironet Configuration For Single Subnet Network
Feb 1, 2012
We have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.
Is it possible to direct it to a webfilter hardware firewall for internet access. For example the IP of the firewall with webfiltering capabilties would be 192.168.0.1
We are hoping to provide customer wifi web access but need to filter what they can access.
About every 20 minutes 12 of 300 APs keep rebooting. I have tried moving them to different controllers. I have tried downgrading the code and then upgrading the code. I have tried replacing the AP. I have tried swamping out cables. They are all connected to a 3750 stack but plugged into different switches in the stack. Here is the result that I could capture when I saw it disconnect from the controller. This is the output from the AP:
DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.40.212:5246 *Jul 28 14:33:19.595: %WIDS-5-DISABLED: IDS Signature is removed and disabled. *Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY *Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY *Jul 28 14:33:19.655: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down [ code].....
I have removed the ip addresses for security reasons.
When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
I have a 1142 that I purchased that needs to be set to factory defaults so that I can configure it. I do an escape at the boot sequence and I get to the
ap:
prompt, the reset instructions that Cisco provides says that I should rename the old config.txt and reboot and that I will then be able to start my reconfig. The problem is that I can't find a config.txt file in the flash space:
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
I'm using the Express Security Set-up tab to configure an Aironet 1142 (stand-alone) access point with EAP.
Objective is to make it a RADIUS client and have laptops authenticate through this access point to a Windows 2008 NPS (Network Policy Server) using computer (machine) certificates - EAP-TLS.
When I select "EAP Authentication" under the "SSID Configuration" I was literally floored to see mention of WEP encryption (a security joke) and no possibility to prefer some variant of WPA (well, apparently not with EAP).
WPA2-Enterprise is what I've selected for "Authentication" and "AES" for encryption in Group Policy (so the laptop clients automatically connect to the access point).
WEP? I bought a Aironet 1142 access point for WEP encryption? How can I configure this securely?
These are currently configured settings as displayed under the "SSID Table" heading:
We have a Cisco aironet 1162N connected to a Wireless Controller (LIGHTWEIGHT mode), the device failed and it needs to be replaced.We have a Cisco aironet 1142N in stock available to use.Can we proceed with the change just with disconnect the failed AP (model: 1162N ) and connect the new one (model: 1142N)? Or there is any other task to be done before the change? since the WLC manages the configuration for each AP.
I’m having issues with enabling Apple’s AirPlay services on a relatively simple network consisting of a Cisco 881 (Advanced IP Services) and an autonomous Cisco 1142 AP. I’ve attached a diagram explaining the connectivity. I believe I have to enable IP Multicast at the router, but I’m not really sure the best/right way to do it. Also I’m not sure what/if any commands would be needed at the AP.All of the wireless clients are confirmed to be in the same subnet, so no real routing is happening etc. Also regular Internet connectivity/routing from the wireless clients is fine.
Since the the "exec-timeout" setting has a default of 10 minutes (if I'm not mistaken), I don't think I could change the timeout value with that command.
Under the "Association" tab of the GUI, there is an "Activity Timeout" subtab and settings for 5 device classes, all set at 60 seconds.
I would guess the setting in question can be configured here. Is the client station device class what I'm after?
We have 5 pcs Cisco Aironet 1142 Access Points without controller at the same building. SSID is same for all of them. Our problem is client connected via wireless disconnecting randomly and continues working after a few seconds. IOS versions are same for all of them you can find detailed information about versions and configurations below.
I am tryign to set up an Aironet 1142, I have created a reserrvation in DHCP using the MAC address, and the reservation shows as active, but I cannot connect to the device with my browser.
Aironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
I have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
I wonder if there is a way to rename an existing SSID on aironet 1142 without destroying/recreating. I tried downloading configuration/ changing name/ re-uploading however that didn't have desired effect. There doesn't seem to be a way via web-GUI.
First, my configuration, (then the problem down below):
I have an Aironet 1142 with multiple SSIDs [mapped to V LANs] connected to Gi1/0/2 on a 2960 switch in a user-accessible area. This switch is up linked to another 2960 switch in a wiring closet, and the Microsoft NPS server is connected to the wiring closet 2960. Aironet -- 2960 [user area] --- 2960 [closet] -- NPS RADIUS
I have the user-area 2960 configured as an authenticator switch for dot1x, and port Gi1/0/2 is authenticating the Aironet via MAB to RADIUS. RADIUS is sending VSA device-traffic-class=switch to the 2960. The closet-2960 has no special 802.1x configuration, nor is it an authenticator switch; it just has a manually-configured trunk port to the user-area 2960 [for now; I'm trying to take this one step at a time!].
The user-area 2960 correctly converts port Gi1/0/1 to a trunk port when the Aironet is authenticated [via MAB]. The Aironet boots up, the port is opened, I can ping the Aironet on the native V LAN, and all is well [so it seems]. The Aironet dot11Radio is configured for two SSIDs and mapped to V LANs, which are being spanned via STP thru the user-area 2960 and the closet-2960. STP is correct and verified on all switches.
I have DHCP snooping configured on the user-area 2960 but only for V LAN 1 [but NOT the wireless user V LANs], the trunk port to the closet 2960 is a trusted port. Hosts on the wired ports on the user-area 2960 are able to get DHCP IPs. On the Aironet, "show dot11 associations" shows hosts on the SSIDs are getting DHCP addresses. Again, I am *NOT* running dhcp snooping on wireless SSID V LANs [i read elsewhere that can cause problems as users roam between Aironets].
I do have CISP configured on the user-area 2960. I do not have CISP configured on the closet-2960 [best I can tell, that's not required at this stage, but I could be wrong]. Despite the alleged documentation, I could not get the Aironet to use a dot1x credentials profile to authenticate to NPS/RADIUS as an 802.1x supplicant, which is why I resorted to MAB for this exercise. The Aironet simply would not run dot1x [best I could tell]. The documentation and configuration didn't seem complex, so I was quite confused.
I have upgraded the Aironet to the latest 12.4(25d)JA2 software, and the 2960 is at 12.2(55)SE7 [i saw 12.2(58) has some issues, but I'm willing to be persuaded otherwise, based on sound advice]. Ok, now the problem:
Users on the guest wireless SSID (V lan 20) say they cannot connect. Yep, classic. V LAN 20 is trunk and spanned to all the sufficient places. The Aironet shows users in the associations list for that SSID with IP addresses from the DHCP server! DHCP snooping is not configured on that V LAN. I read another support forum post saying CISP and MAB could cause problems with "disappearing" ARP entries. I appear to have that problem. However, the user on the Staff wireless (V LAN 10) has full access. Am I running into a problem with "multi- host" authentication config? Via tcpdump on my firewall, I see nothing but broadcast and multicast traffic coming from a host on VLAN 20. What puzzles me is how I do see *SOME* traffic from a V LAN 20 host on this SSID, but no uni cast traffic!
Since you're going to ask, here is my port config for this AP on the 2960 authenticator switch in the user-area, and the AAA config pieces:
#sh run br | in ip dhcp ip dhcp snooping vlan 1 no ip dhcp snooping information option ip dhcp snooping database flash:dhcp_snoop.txt ip dhcp snooping [code]......
When we take a look at the internal antennas on the 1142 AP, we notice the 5ghz pointed all the same way, but for the 2.4ghz we can see each offset by 45/120 degrees. It was my understanding that all antennas are omnidirectionals on the 1142, why are those 2.4ghz antennas not all pointed the same way? onfiguration advantage and that each antenna is indeed omnicadirectional? Example, if I shut just one antenna off, do I lose a sector (120degree)?
I have some 1142-lap that i have to deploy in my office.
I have successfully deployed 5 out of 8 LAPs . Actually the LAPs was not discovering the controller automatically.
So i had to configure the Controller ip adress through the console in tha AP using the CAPWAP command. Then the AP promptly associates with the controller. Later on i configure the AP name - Primary , Secondary , Tertiary Controllers and everything else and saved it on the controller. This worked out well for the 5 LAPs that i had.
But started facing a peculiar problem with the rest three
As soon as i disconnect the AP from my desk and have it mounted on the celing , to my surprise if find that the LAP doesnt retain its configuration and also doesnt associate with the Controller.
Cant imagine what could be the issue.
I have been told that one CANT wite/save any configuration manually on tha LAP using the console, except by associating it with the controller. Is it a fault with the AP ( as the other APs are working absolutely fine)
I have a wireless install using several standalone 1142 Access Points. Yes, I know it would be better to use a WLC, but there isn't one and no funds to install one, so I have to work with what's there...
I'd like to configure the 1142's for wireless N connectivity. Yes, I know I need to ensure WPA/PSK is the security used as WPA/AES, the default option in the CLI won't be happy with wireless N.Currently I am running them in B/G only and they work just fine with WPA/AES. No issues are reported by the users, but of course I'd like to get them running N for the increased throughput so I need to kniow the CLI steps required.
We have 6 aironet 1140's throughout the office I have them all configed as one ssid but I would like the DHCP to come from our Windows server. Right now I have set them up with ip dhcp pools. So what is the secret to get them to send dhcp requests to the Windows server?
Need simple configuration for the Aironet 1142N? Optimally, I would like to place 802.11b/g traffic on the 2.4 GHz band and 802.11n traffic on the 5 GHz band.
I have to configure DHCP on Aironet 1100 WAP so wireless client will get IP address through WAP. I tried all the option mentioned in Document but nothing is working.
I have a AIR-SAP-1602i-k9 Aironet. I cannot find any information on the Cisco site on how to configure the Aironet without a controller. I assumed a standalone meant I could just login.
I tried seeing if it would pull a DHCP address on my network but it didnt.
I set up one AP-1041 that runs standalone IOS. No controller. I have three more that I want to copy the setup configuration over to. I have the right document, but which commands will get my set configuration from AP one FTP'd to my computer and how to copy that configuration back to another AP of the same model. This way I will only need to tweak a couple settings on the additional AP's instead of starting from scratch.
I bought a Cisco Wireless AIR-CAP2602i-E-K9 and have some practice on Cisco routers, but can not log in "Global Configuration Mode", not existe the command "Configure". How active configuration?
How can I enter into "interface configuration" on Aironet 1130AG, AIR-LAP1042N?When I put following commands in enable conf tinterface Dot11Radio1 but, it fails and I cannot enter into "interface configuration".How can I do this ?The reason why I enter into conf tinterface Dot11Radio1 because I want to disable cdp via CLI ( serial console).
I must configure an Aironet 2602e Access Point, as a standalone access point (without WLC), but I can not find Configuration Guides for that. I have only found the "getting started guide" but there is described an installation combined with a WLC, which I have not. Is it provided no real guidance from Cisco? I did something never done before.
I've noticed that I've had to prime a lot of the 1142 devices. When attached to the network they not seem to find the controller. The subnet has the scope option and I have other 1142s working but recent ap's seem to not work unless primed.
a link is added between Vail and Telluride in case if one of Aspen links fail to prevent AS 400 to become isolated. This link runs IBGP between both routers. Because this is an iBGP link, both routers will exchange BGP routes freely and automatically enters those routes into the routing table. Anyways, this link is advertised to OSPF through the BGP-to-OSPF redistribution. However, the book included that link in the OSPF configuration because as the book says "Without it, the iBGP session will not form" ... I did't get this part because the link is physical not logical between Vail and Telluride. Before the link was logical and the TCP session was performed through Aspen that's why we needed Aspen to know about this link. But now, it is physical so the iBGP (TCP) session should be formed without including that link in the OSPF config.
I have encountering a problem with a new installation at my clients side recently.We have a 5508 wlc and a bunch of Laps connected to it.Recently we associated a 1142ap to the same controller.The issue we are facing is that , the client laptops that are connected to THIS ap are showing maximum of only 54mbps in their network information dialogue box.Initially i couldn't understand why this could happen.But after a bit of research , i came to know that this could happen because of ``unticked`` data rates in the controller , or because of not using wpa2 with aes as the security standard for N-series access points.Now i have enabled all data rates in the High Throughput section as well as enabled the correct encryption standard.But still the issue persists.We have checked with multiple laptops , to rule out the possibility of a faulty n/w card
I have a /25 block of public ips from my ISP which I'd like to subnet into two /26 blocks. I have a Cisco 2600 with 2 ethernet ports in it. What are the commands I'd need to take my 200.180.200.0 255.255.255.128, gateway 200.180.200.1 and turn it into 200.180.200.0 255.255.255.192, gateway 200.180.200.1 and 200.180.200.64 255.255.255.192, gateway 200.180.200.65? One of the interfaces will be connected to the ISP & the other to a switch, and then we could access the two subnets through the switch.
I'm using cisco LMS 4.0, I've discovered the device and next plan is to collect the device configuration.I would like to know, How I can collect the configuration for single device.What configuration changes required on my LMS & Cisco device.
