Cisco Wireless :: WRVS4400N Ssid Vlans Are Not Working
Nov 2, 2011
I've been searching high and low and although I've found many results of people having this same exact problem there doesn't seem to be a fix, or at least no one was kind enough to post one. I have many vlans but the 3 in question are 10, 20, 30.
-10 is for my laptops and desktops with an ip range of 192.168.10.10 - 192.168.10.50.
-20 is my home automation network with an orange of 192.168.20.20 - 192.168.20.150
-30 is my guest network with a orange of 192.168.30.84 - 192.168.30.89
I have a dell powerconnect configured with vlans as my core switch. I trunked a port on the switch assigning 3 vlans (10,20,30) and connected it to port 1 on the wrvs4400N. On the wrvs4400 I trunked port 1 tagging vlan 10,20,30. For some reason vlan 1 is untagged on port 1 and I don't know why. I also have a router connected to the powerconnect. Of the 3 vlans I mentioned vlan 10 and vlan 30 are the only ones with interfaces on the router. Vlan 20 is an internal network with a separate router and until I figure this out that router is physically turned off. Also the router currently turned on has no routes configured to connect my vlans. Currently there is no configured way to jump vlans.
No matter what ssid I connect to I get a dhcp response from vlan 10. all my test indicates that I'm actually on vlan 10. I get internet and I can hit all devices on vlan 10. If I connect to ssid guest and change my ip address to match vlan 30 I can not ping the gateway for vlan 30 and I have no internet access. Some times I get something different. Sometimes I get an ip address from vlan 1 on the powerconnect. If I renew my ip address then I'll grab one from vlan 10 but I should be getting one from 30 or none at all for vlan 20. The absolute crazy part is my droid sometimes gets a 192.168.4.x ip address. I don't have a 192.168.4.x network or dhcp scope anywhere on my network! If I physically plug into a port on the power connect I get to the correct network 10 out of 10 times. If I configure vlans on the other 3 ports on the wrvs4400 and physically plug in, I get to the correct network 10 out of 10 times. I've reset to factory a few times and I've been all inside and out of the wrvs4400. I have no clue what could be wrong with this thing.
the objective is to set up 2 vlans, one of which is a wireless access point connecting to our company network which is behind our firewall. the other is a wireless access point for admins and selct people to connect directly to the internet, bypasing all network devices and firewall. i am unable to get tech support unless i buy a contract for $800. I currently have it working and vlans setup but they both hook into the company network.
I have a WRVS4400N that broadcasts two different SSIDs. One is a public network and the second is a private network. Right now, both SSIDs are pulling from the same DHCP server, but I would like to separate the public from the private. How can I separate these SSIDs by vlans? I can't seem to get the vlans to route to separate ports.
This is my vlan settings. I have two DHCP servers right now. One is in an isolated network plugged into Port 3 of the WRVS4400N. The other is on the production network, plugged into port 1 of the WRVS4400N. For some reason, whenever I connect to SSID Public, it won't pull an IP from the DHCP on port 1, it only pulls it from the one on port 2.
I know there is three SSIDs here, the Static one is going to be the same network as the EMS one.
A query here with regards to Wireless isolation between SSID and wireless isolation within SSID.If we have 2 SSID, eg. InternalSSID, GuestSSID on AP1.Both SSID are set to Enabled for isolation between SSID, and within SSID, that would mean all machines connected thro' this AP1, would be isolated from one another.
1) If there's 1 laptop that connects to another AP, lets call it AP2, (doesn't have isolation function) on ssid01. Would this laptop still be isolated from those that connects to the first AP?
2) If there are wired PCs connected to the router. And the 2 APs are connected to the same router. Would the machines connected thro' the AP1 on either InternalSSID, GuestSSID be able to access those wired PCs? (My assumption is yes.)
3) Is there a quick and efficient way to setup on WRVS4400N to isolate GuestSSID totally from InternalSSID, and wired PCs. InternalSSID and wired PCs should be allowed to 'see' one another.
The challenge here is that, the network points are all installed already. Both AP are connecting thro' 2 separate unmanaged switch together with a couple of other PCs. 1 Port on the unmanaged switch, each,connects to the router.
Setup a WAP321 with the new 1.0.1.10 firmware. Setup 2 SSIDS:
WIRELESS (vlan:1) GUEST (vlan:99)
The wap is plugged directly into a port on my router so I configured the port and additional vlan99 port. I have a DHCP scope assigned on the router to both the port and port.99 interfaces.clients on WIRELESS have no problem and work correctly, however when a client joins guest...a packet capture on the router port shows that a dhcp request is being received for the same MAC on both untagged and tagged 99 interfaces....thus it appears the WAP is not handling the vlans properly
16:07:10.566932 PortA, IN: IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 84:c9:b2:78:fc:31, length 331 16:07:10.566947 PortA.99, IN: IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 84:c9:b2:78:fc:31, length 331
I have two 1142n LWP ap converted into standalone, as client doesn't have any controller there. They just want to extend their network via wireless.
L3 switch (trunk port gig 1/48) -----> connected to AP1 L3 switch (trunk port 2/48) -----------> connected to AP2
client is looking for 3 vlans on the floor ( users might multiple vlans might associated same AP ). They have a dedicated DHCP/DNS server and he will be configuring 3 vlans on L3 switch with correct ip helper address on SVI interfaces.
I'm i allowed to created 3 SSID's on 1142n standalone AP ?
What would the various optiosn to achieve this requirement ? Is there any simplest way to achieve this ? Do i need to go for 802.1x ? I remember client told their users are authenticating by using AD for wired network. This is their first request for wireless environment
We are deploying 3600 AP's with a 2504 and would like to create multiple SSID's that are mapped to unique VLANs so we can control the traffic at the Firewall. We have the 2504 up and running with AP's but there appears to be no where in the 2504 controller Web GUI to configure a VLAN mapping to an SSID. Any pointers to documentation on how to configure?
After a long effort I managed to get my WRVS4400N to work and provide a stable WLAN/LAN and to define all network devices in my home office. It is running the latest firmware (2.0.1).
I created a seperate SSID and a vlan for it (vlan ID is 3 and IP is 192.168.1.xxx while the default vlan IP is 192.168.0.xxx).
My plan is to use that SSID/vlan for the kids and block some bad content for them via the router there.
I want to make a ACL for that vlan but in the computer list option I can only specify ranges in the default VLAN segment (192.168.0.xxx) while in practice I need the 192.168.1.xxx segment.
I can't switch to .0.xxx as some devices are hard wired to be .1.xxx on my network.
I'm using an ASA5510 with AP1130 and attempting to set up a public and a corporate WiFi-network. The corporate one should allow users to authenticate with Radius running on MS ISA for access.
VLAN70 security level 1 (IP-range 10.10.70.0/24) for open guest WiFi. VLAN71 security level 100 (IP-range 10.10.71.0/24) for corporate users WiFi. VLAN100 security level 100 (IP-range 10.10.100.0/24) server network (only wired servers).
ASA is gateway at 10.10.70.1, 10.10.71.1 and 10.10.100.1. It is also DHCP-server for VLAN70 and 71.
Radius server is at 10.10.100.5, listening on port 1645 and 1646 for EAP/PEAP and MS-CHAP v2.
I get both WiFi-networks with VLAN 70 and 71 working without encryption, ie. open networks. Traffic flows fine and get network access without problems.
The problem I run into is that it seems the Radius server must be on the same network as the WiFi-clients for them to be able to authenticate with it. That is, I tried to use VLAN100 as the corporate WiFi network and then I am able to connect, authenticate and get network access if I also enable DHCP for that range. However with VLAN70 as WiFi I am unable to authenticate with Radius on VLAN100. It seems the AP can reach the Radius server but clients never get connected and eventually fail with an error.
I can ping the Radius server from the AP. All traffic should be allowed from VLAN71 to VLAN100 in the ASA. Packet tracing shows no errors there.
The switch is a 2960G with the following interface config:
how i can configure a second ssid for guest access in our environment. this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time. My AP config is attached below.
Do i need to redesign the whole network to have a native vlan other nthan the data vlan? Does the access point need to be aware of the voice vlan? Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?
My question is if I can configure 3 ssid, for 3 different VLAN and add the DHCP address from a WAP4410N AP, when you upgrade to the latest version of IOS I can have this functionality?
I've been configured my device to forward FTP service to my server, however, I can't access this service outside from my network. I used Single Port Forward and not worked, after, I've used Port Range Forwarding starting in 20 to 21 and not work again.I've sniffed my computer and I've found just 3 outsides packages without response.I've tried with directly IP ADDR and DYNDNS ADDR, but neither one or other worked.
I have two router WRT160N & WRT120 N . They are working successfully with different SSID. Now I need one SSID. Need if found wi-fi signal week Another wi-fi take care automatically.
My WRVS4400N is not letting my VPN client through the router. I have checked the passthrough boxes for all 3 protocols. I have port range forwarding for my VPN connections to my SBS2008 box on port 1723.
So got an Xbox 360 slim and if I try to connect to route with WPA2 if fails. If I change to WPA or set up a second SSID with WPA it connects and works fine.If I connect Xbox to another router with WPA2 it works fine.Same results picking AES or TKIP for security type.The xbox is used in a break room and really don't like the fact that I need to have another ssid and it be less secure, esp as WPA2 has been out long enough this shouldn't be an issue. I test 4 other routers and WPA2 and xbox all work fine but not this one but this is the one I have to use due to feature needs.
I use RDP extensively on my LAN to use and manage 4 PCs running Win XP or Win7. My consumer-grade Cisco Linksys WRT610n crapped out after less than 2 years, so I thought I'd try the Cisco WRVS4400N to gain extra features like VPN. I have not enabled anything new on the router except for adding a second wireless SSID for guest use, although no bandwidth management or VLANs have been set up yet. Firmware version is 2.0.0.8.Since installing this router I have been unable to use Windows RDP on ANY of my computers on the LAN, whether I use the machine name or the IP address. I can ping every device on my network - print servers, NAS boxes, PCs, but no RDP. WHAT'S GOING ON?
I am trying to create an IAP for a single computer based on it's MAC address. I want to block certain keywords and websites 24/7. When I setup the IAP as number 1, I add the MAC address of the computer in question. I then Select Allow and choose Everyday and 24 Hours. I type in the forbidden domains and click add after each one. I type in the keywords and click add after each one. After I click on Save, all of my computers on the network lose internet access.
I have WRVS4400N VPN Version 2, firmware version 2.0.2.1
I have the router for over two years, Present Firmware is V2.0.1.3, I have Polycom phone connected to the router using 8 x 8 VOIP service. The phone was working fine untill yesterday. 8 x 8 tech support suggested getting a different router. I have the same router at home and tried the same phone on my home router - it worked. So, the problem is not the phone but int he router. I tried to call Cisco tech support but found out that the warranty support expired and I need to buy a support plan. Called to buy the support, and gave up after an hours on hold. Left message.
i'm having troubles with a DHCP server, which is unable to give IPs to hosts that are on a different VLAN than the server.I have this little scenario, one L3 switch (SGE2010-48 without PoE) with 7 different VLANs configured in[CODE]
How to get vlans working properly between sub-interfaces on a ASA and a trunk port on a switch.There seems to be issue with the VLAN's being assigned to the correct VLAN and this information being properly sent to the ASA over the trunk.
We seem to be unable to ping most of the interfaces except for one on the switch. Sometimes if we are lucky we are able to ping a host on a different vlan that is on the switch. This seems sparadic at best.
Logs on the ASA show traffic does not seem to be assigned properly to the correct sub interface. We have access rules on the ASA disallowing traffic not part of the same vlan. For example you will see networkA blocked on networkB when it really should be directed through networkA's sub interface.
Any example commands for the ASA and Switch for at least the basic requirements to enable all the VLAN's to communicate properly with the ASA?
Is it possible to assign a single ssid to multiple interface groups by assigning the ssid to multiple AP groups?
I have buildings geographically dispersed that are configured with multiple vlans in interface groups so that I can maintain an addressing scheme of dhcp assigned addresses per building. Each building is also further grouped as AP groups. I'd like to know if by assigning the same wlan ssid to each of the AP groups, will I maintain addressing integrity for each building? I'm thinking it will work.
Do the buildings have to be outside AP range of each other to avoid problems?
WE have to deploy ASA5585 in between User vlans & server vlans. we have to find all the ports that needs to be opened on firewall. any tools to do same.
I hardly try to get WDS running with two WRVS4400N v2.The manual (and the web interface) says: "Note: The WDS feature allows WRVS4400N to connect with up to 3 wireless repeaters that can be either WRVS4400N or WAP200." But I wasn't successful by now in getting it working..What I've done so far:
- Setup the primary WRVS as Gateway, WAN through Modem, LAN and WLAN using WPA2 Personal Mixed, DHCP - works perfect - Setup the second WRVS as Router using the same WLAN settings, no WAN and no DHCP - Enabling WDS on both WRVS, giving each the MAC address of the other - no connection to LAN or WAN through the second WRVS
I really need the second WRVS act like a bridge. Since the manual is saying that I can connect both devices through WDS I bought two of them. On the other hand I've now read somewhere in the community, that this isn't possible with two WRVS (?)
I've got an out of the box WRVS4400N and it will not pick up a DHCP IP from the ISP.
I reset to factory defaults, tried another ISP, returned and got a second wrvs4400n all the same results - no IP address on the WAN port. The internet LEDs are blinking but no IP on WAN port and no internet connection from a laptop connected to wrvs4400n.
I even tried turning of the firewall too.
Is there something with these routers that needs to be done for internet access?
Most typical small routers are just set up as a DHCP client on the WAN side and DHCP server on the LAN side.
In the note, i ve seen we can configure a WDS with 2 WRVS4400N, but i can't.How can i configure the 2nd WRVS4400N as repeater? Or can i configure it as Access point for another modem ?
I am using a WRVS4400N as my primary router for a small office. I get the following message repeated over and over in my logs. This seems to happen for 2 or 3 days and then it will go away for about a week and then come back. What is causing this? The best I can tell I don't have any IP conflicts on the network and most of the time the network has very little traffic other than 2 or 3 computers surfing the web. [code]
I am having some problems with WRVS4400N v2.We use it just for wired network (wireless is not in use, but it is configured). As a WAN we use PPPoE. Most machines do not use DHCP.After a while (few hours to few days after power up) the router freezes and it is not accessible. I cannot ping it or access to the admin page.I have the latest firmware version (V1.00.09-ETSI)I also called service and they suggested to reset it to factory settings and reconfigure it.
I have an older Linksys WRVS4400N Version 1.1 VPN Router. I have it set to run in mixed mode G/N. I still can only get connection speeds of 54 Mbps though. How can I get my wireless N clients to see 300 Mbps speeds?
I have a D-Link DSL-320B ADSL2+ Ethernet modem that connects to the internet fine if I am using just 1 computer. However I have bought a Cisco WRVS4400N to enable me to get all of the other computers at home on the network (wired and wireless).
The WRVS4400N picks up a WAN address from the D-Link BUT I just cannot get an internet connection, just "Local" only. I have tried setting it up as a gateway, as a router, upgraded the firmware but it just is not having it. My previous experience with routers has been just to plug em in and let them get on with it. The WRVS4400N is proving very troublesome.
I am have a lot of difficulty getting my WET610N to connect to my WRVS4400N. I have tried almost everything. I have some older PC's, as well as my PS3, that we use to use on the network and they only connect B/G. I have tried auto DHCP and static IP on the bridge. It seems that the only way that the bridge works is by using the WPS function that the business class routers do not have.
Now that Comcast is in the process of rolling out IPv^ to their customers nationwide, will there be a firmware update that properly displays the IPv6 /64 address as provided by the cable provider? Currently the only IPv6 address displayed is on the LAN page and is not configurable (greyed out) except for the prefix length. I already have a cable modem that will provide both IPv4 and IPv6 addresses as they are rolled out.
