Multiple SSIDs\VLANs, DHCP and wireless

Similar Questions

• One multiple SSID VLAN. Is this possible?

  Hello

  Is it possible to have one SSID of the wireless network but when users associated with the Wlan have access to different VLAN?

  It will run with a WLC (Wireless Lan Controller) and a Cisco secure ACS.

  Yes, by using assignment vlan dynamic with Radius, see link for detailed configuration:

  http://www.Cisco.com/en/us/Tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

• Question about Design and wireless controller

  Hello world

  Although I am not new to Cisco, I have some limited experience with Wireless in general.  I was hoping to get your help with the following:

  We currently have a total of 8 1130AG, 4 on each floor.  They have been set up a few years ago, and now we are looking to update the design a bit.  Each access point has its own SSID and just provide internet access.  Looking at the configuration, I noticed that they are not configured to use the appropriate channels, the channels just randomly (9, 10, 11, instead of 1, 6, 11, etc.).  I noticed that when I roam from one access point to another, I'm losing on 4-8 pings until I re - establish connectivity again.

  Here are my questions:

  1. do I need a controller in order to use one SSID for the entire installation instead of the seprate 8 of those currently?

  2 will be using controller providing a seamless transition when a customer places between AP?

  3. is it normal to lose connectivity around homelessness?

  4. can I reconfigure the current configuration to use one SSID and provide the best transition between the AP without the use of a controller?

  5. what controller that you would recommend?

  We didn't need anything fancy, I am aware that I can activate multiple SSID VLAN, etc..  Just tried to keep the simplest possible, even reliable.

  Your entry is appreciate.

  Thank you

  Need me a controller in order to to use one SSID for the entire installation instead of the seprate 8 of those currently?

  Yes a controllers will solve the problem. any case of autonomous ap try to use the feature "unique guest SSID broadcast.

  2 will be using controller providing a seamless transition when a customer places between AP?

  It will not solve the problem, but it depends on the type of config goes for the consolidation of the AP? Layer 2 roaming? Layer 3 roaming? etc.

  3. is it normal to lose connectivity around homelessness?

  No, you should same autonomous AP, check of overlapping channels

  4. can I reconfigure the current configuration to use one SSID and provide the best transition between the AP without the use of a controller?

  This can be a solution

  5. what controller that you would recommend?

  It depends on what is your need and how much access point you have? 4400 and WISN are most commonly used.

• ISA550W with multi SSID (each having separate DHCP and VLAN tag)?

  ISA550W can do the following (in order):

  (1) first group interfaces physical and Wi - Fi SSID (s) set

  (2) then assign with DHCP (ip or subnet)

  (3) then add a tag VLAN interfaces and SSID (s) wireless

  (4) repeat 1 to 3 for the remainging and SSID (s) wireless interfaces to create the following diagram:

  

  (1) I believe that could transform these ports in ports of junction. That said, I'll normally in the ports themselves through networking, change them to the Trunk ports and add the appropriate VLAN. Please keep in mind that as a general rule which present you to a Trunk port is another switch. Then you EF the VLAN appropriate to each switch coelio that attach a device such as a workstation. There are some devices that do not support be connected to a Trunk port, like the OnPlus of Cisco device however.

  (2) think SSID that only access ports. Because you could never connect a device that would support Trunking wireless, you can apply only 1 VLAN by SSID wireless-> basic settings.

  (3) because the SSID cannot be interconnection. See #2 above for configuring the VLANS on SSID.

  Sent by Cisco Support technique iPhone App

• Reference Dell 6248P - VLANS, DHCP, wireless AP

  Hello

  I'm trying to set up a VIRTUAL LAN for wireless comments traffic go through our main switches and on an ADSL router but I'm running into some difficulties.

  We have 3 points of access for model AP - AC Unifi. Each access point has a connection of physical network of 1 of 4 Dell 6248 switches which are currently in a single stack managed as follows.

  AP 1-> Port of the Switch 1 40

  AP 2-> Port of the Switch 2 36

  AP 3-> Port of the Switch 3 17

  The managed pile and AP are currently using the 192.168.1.0/24 on VLAN 1 - default and I created a VLAN 10 - guest.

  The APs have two SSID WLAN, 'corporate', which is also on the 192.168.1.0/24 range and 'guest' that is located on 192.168.99.0/24. I put the "guest" to mark its traffic with VLAN 10 and no DHCP is defined.

  I put the 3 above general Mode ports, allowing all managers and VLAN - 1 that are not marked and VLAN - 10 they are labeled.

  I also put a Zyxell router with a static address of 192.168.99.254 in Switch 4 Port 24 and set to this mode of trunk to VLAN 10.

  The router is configured to provide DHCP for the beach of 192.168.99.0/24.

  Now when I connect a laptop to our 'coporate' WLAN, everything works fine. I get a DHCP address from our server and I can reach everything as usual.

  When I connect to the "guest" WLAN, I don't get a DHCP address. If I put a static address, I can't do a ping to the router.

  Could someone tell me if my configuration is correct?

  Thanks for the additional information and the display to the top of the config.

  A couple of things I noticed the config:

  -I don't see that whatever it is set to Switch 4 Port 24, which is the case the router Zyxell is plugged. If this port is not configured properly, it may not be able to see the communication on the VIRTUAL LAN. A config like this should work on Switch 4 Port 24.

  # interface ethernet 4/g24

  switchport mode access #.

  # switchport VLAN 10 acccess

  -You may need to configure a static route to highlight traffic VLAN to the router.

  # ip route 192.168.99.0 255.255.255.0 192.168.99.254

  I would like to know if any of this helps.

• VLANS, DHCP, subnet, gateways and Multipathing Setup Question

  Hi, I have a House VI3 test network configured like this:

  Netgear wireless router,

  Adapter plugged into Port A1 of HP Procurve wireless game layer of 4000 M 2 switch with 802. 1 q (provides the uplink to my router upstairs that serves internet)

  VLAN by default 1 is 192.168.1.X/24

  On this switch, I have 2 ESX boxes with 4 cards each, Openfiler iSCSI target and a Windows XP Pro box running my Virtual Center.

  I have a Virtual Machine that running SBS2003 with also serves as my DNS server and my DHCP server.

  SBS2003 - 192.168.1.6

  Gateway (router Netgear) 192.168.1.1

  ESX1 - 192.168.1.10

  ESX2 - 192.168.1.11

  XP Pro - 192.168.1.50

  Well, with that of the road, my question is I want to set up a VLAN on my switch Procurve to separate traffic by default network, iSCSI and vMotions traffic.  By ESX Server best practices. to install a second Nic vKernel or SVC Nic console, they must be on a separate subnet with a defined gateway.  If I create a new vLAN for iSCSI and assign a network adapter, the network traffic will not be able to see my gateway. I also need my DHCP server to receive requests from any computer on any vLAN individual and issue a corresponding IP address.

  Now, what should I do?  If I create a vLAN Tirtiary or the second, I'm not able to see the DHCP server of these VLANS?  I can only UNTAG a port in 1 vLAN and port of marking abandon any connection to my DHCP server.  On this switch I assign IP addresses for individual VLANs, but this did not help.  DHCP isn't bradcasting across multiple VLANs. Am I missing a piece of hardware to provide ACLs or something?

  I don't know where to go from here, please help.

  Hello

  To route between VLANs, you must be a switch of layer 3, is a router configured as "a router on a stick", which is essentially a port of the switch, configured as a trunk, connected to the router that is configured with a number of interfaces, one for each VLAN so that it can route traffic between the VLANS. Now create a VLAN for VMotion traffic is fine as has no need to be routed. The VLAN for iSCSI and VLAN to the Service console will have to be sent to iSCI work properly. DHCP can work through several VLANS but need aid IP to be configured on the switch.

  Concerning

• Wireless and wired router, DHCP and "visibility".

  Okay, it's a bit complicated, but I'll explain better than I can.

  I have a wired Linksys RV082 router. It works very well but is not wireless.  I have a Cisco/Linksys E2500 wireless router for my wireless devices to use.  the RV082 is the network of 192.168.1.x. The E2500 is the network of 192.168.0.x.  Cable Internet goes to the RV082 Wired, and a line out from there to the wireless router.  This all works fine except for a few disadvantages.

  I have an iPad that connects wireless and some of the apps offer a http:// option, so I can transfer files to this application.  I also have a network printer connected to wired and wireless devices do not.

  I have 2 problems:

  (1) in order to transfer files from my laptop (that I hung on the cable network most of the time), I disconnect the wire, wireless, then I can transfer files.  Œuvres, but it's embarrassing.

  (2) I want a netbook that I have on the wireless connection to print on my printer wired network.

  It seems that the 2 networks do not see each other.  Here are the things I've tried:

  (1) I disabled DHCP on the wireless router.  My thought is that requests for an IP address to the wireless router has sent will be transmitted along my wired router... NOT.  On my iPad and Wii, they could no longer connect wirelessly. Strangely enough, with the disconnected wire and wireless connection with my laptop, I've still was getting a 192.168.0.x IP address, even if the DHCP service is disabled on the wireless router.

  (2) thinking I would put manually the wireless router on the 192.168.1.x network, instead of saying things to get an Internet connection IP dynamicaly, I manually the IP value is 192.168.1.245.  Serious mistake.  I couldn't connect at all anywhere then.  The only way I could fix it was to hang on to my laptop computer, assign a static IP address to my laptop on the same network as the router, then I was able to get to the configuration page and to put things like he was.

  Another thing... Even when I'm connected only plugged on my laptop and wireless is disabled, I ping 192.168.0.1 (the wireless gateway) and it returns a value. But, when I try to go in a browser, I get a "page not found" error

  So, how can I get these two networks to play well and see each other?

  Thank you

  Jesse

  Put the router E2500 'bridge' mode and it will transmit the RV082.

  Assign E2500 DHCP, an IP address for itself of thje RV082, it will just be for access to the web administration E2500. System powered via the E2500 wired or wireless IP addresses will be obtained from the DHCP server on the RV082, and these will all be on the same subnet as designed to be plugged into the side of the RV082 LAN.

  Should allow you to do exactly what you want to do.

  I have a similar setup here works well with an E4200V2 right now.

• Selection extended DHCP and several VLANs

  I have a switch that has 2 VLANS: vlan 2 and vlan 3 - and both computers are connected to the switch where each PC is a member of one of VLAN.

  PC2 = VLAN2

  PC3 = VLAN3

  The switch is connected to a router that acts as a DHCP server with several 3 DHCP scopes for each of VLAN, basically a simple configuration "router on a stick".  This question has been confusing me for some time: How does the router knows what dhcp scope to assign an IP address to a particular computer?

  Let's say PC2 is now trying to get an IP address from the DHCP server, I know initially that he will send a DHCP DISCOVER broadcast to the router message and I assume that the router will know the VLAN demand coming as well based on the information contained in the package. But how the router discerns what scope to assign IP address to PC2 especially if I need PC2 to have an IP address in the subnet 192.168.2.0 and NOT 192.168.3.0 or vice versa?  The controls of such a choice?

  IP dhcp pool vlan1

  DHCP excluded-address IP 192.168.2.1 192.168.2.10

  DHCP excluded-address IP 192.168.3.1 192.168.3.10

  !
  IP dhcp pool vlan2
  network 192.168.2.0 255.255.255.0
  test.com domain name
  Server DNS 192.168.2.1
  default router 192.168.2.1

  !

  IP dhcp pool vlan3
  network 192.168.3.0 255.255.255.0
  test.com domain name
  Server DNS 192.168.2.1
  default router 192.168.3.1

  THX sc.

  Hi Sherwin,

  It's will be very simple. I guess that on the router configuration stick will have something like below.

  FAS int 0/0.2

  encapsulation dot1q 2

  IP 192.168.2.1 255.255.255.0

  FAS int 0/0.3

  encapsulation dot1q 3

  address 192.168.3.1 IP 255.255.255.0

  Now when a PC that is connected to the VLAN 2 send a DHCP broadcast this program is received by the interface that belongs to the same broadcast domain (VLAN 2). This broadcast is received by the Fas 0/0.2 and this has encapsulation dot1q sub interface 2 and so it will be part of the same broadcast domain (VLAN 2). If the router will search if there is no DHCP scope configured for the ip range on the interface sub Fas 0/0, 2. Now, router knows the 192.168.2.0 extended DHCP and assign the IP range of this scope to any PC in the VLAN2.

  I hope this helps.

  Concerning

  Najaf

  Please rate when there is place or useful!

• External DHCP and WLC 2106

  Hello

  I built a WLC 2106 and 5 LIghweight AP 1121 G-based wireless network. Each AP have multiple ssid in VLANS separated.

  I managed to combine 5 AP to the controller and I have it configured with multiple SSID in different VLANS (each WLAN is associated with the virtual interfaces in the appropriate VLAN).

  The problem is that a wireless client cannot get its IP address from the DHCP externel which is in the same VLAN of the WLAN. And when configured with a static IP address, it works perfectly.

  Can you help please and thank you very much.

  Hi Nizar,

  The controller intercepts all broadcast traffic, so you must configure your DHCP server in your controller to allow your clients to receive DHCP.

  Using the graphical interface, go to the controller-> Interfaces. Click the interface that you use for your SSID. Enter your server DHCP here.

  I would like to know if your problem persists and we can find out what else could be wrong.

• BVI Interface inaccessible since the addition of multiple SSID

  Announcement to the community for the first time.

  I have a simple HomeLAN which consists of a Cisco router for series 800-> switch PoE Cisco3560-> Cisco Aironet 1131AG Access Point.

  Everything works well for a while in which I had a simple port to "change the access mode" configured on the switch facing the AP and one SSID on the access point that is configured in stand-alone mode (without controller).

  My provider has enabled IPv6 on my broadband connection and I started to reconfigure my installation this afternoon to allow this.

  I decided to run only a bunk Dual LAN and a separate native IPv6 only test LAN for proof of concept.

  With this in mind, I changed the switch port to the access point to a "mode trunk switch' using simple dot1q encapsulation. I have also consulted the post helps very https://rscciew.wordpress.com/2014/05/24/multiple-ssid-configurations-on... after finding in this community post on the topic of multiple SSID https://supportforums.cisco.com/discussion/10899511/how-broadcast-2-ssid...

  I have now two SSID broadcasting (we will call double stack and ipv6 only for the sake of the argument). The SSID double stack uses VLAN 2 and 1 bridge, while the SSID only ipv6 uses 6 VLAN and bridge 6.

  I must stress at this point that my router (where I want to layer 3 for the two LANs gateways) I have DHCP, DHCPv6 and SLAAC configured on relevant VLANs.

  I seem to be the 2 VLAN trunking of properly and I can see the SSID broadcast in my house. I can connect to the SSID (authenticate and form an association as seen in 'show the dot11 association'), but I don't get an IPv4 address or IPv6 assigned to all clients (I tried Mac OS x, iOS, Android, and Windows phone). Furthermore, I can't ping the IP bvi1 of the AP - that is the element that is annoying me more that I must console to the AP to make any changes at all.

  Here is an overview of my AP configuration, with relevant parts removed for safety...

  dot11 syslog
  !
  dot11 said ipv6 only
  VLAN 6
  open authentication
  shared authentication
  authentication wpa key management
  MBSSID-guest mode
  WPA - psk ascii 7
  !
  dot11 said double stack
  VLAN 2
  open authentication
  shared authentication
  authentication wpa key management
  MBSSID-guest mode
  WPA - psk ascii 7

  interface Dot11Radio0
  no ip address
  no ip route cache
  !
  the cipher mode vlan 6 encryption tkip aes - ccm
  !
  the ciphers of vlan 2 encryption tkip aes - ccm mode
  !
  has declared ipv6 only
  !
  such double stack
  !
  MBSSID
  root of station-role
  Bridge-Group 1
  Bridge-group subscriber-loop-control 1
  Bridge-Group 1 block-unknown-source
  No source of bridge-Group 1-learning
  unicast bridge-Group 1-floods
  Bridge-Group 1 covering-disabled people
  !
  interface Dot11Radio0.2
  encapsulation dot1Q 2
  no ip route cache
  Bridge-Group 2
  the bridge-group subscriber-loop-control 2
  Bridge-Group 2 block-unknown-source
  No source of bridge-Group 2-learning
  No extinction unicast by bridge-Group 2
  Bridge-Group 2 covering-disabled people
  !
  interface Dot11Radio0.6
  encapsulation dot1Q 6
  no ip route cache
  Bridge-Group 6
  the bridge-group subscriber-loop-control 6
  Bridge-Group 6 block-unknown-source
  No source of bridge-Group 6-learning
  No bridge Group 6 unicast-flooding
  Bridge-Group 6 covering-disabled people
  !

  interface FastEthernet0
  no ip address
  no ip route cache
  automatic duplex
  automatic speed
  Bridge-Group 1
  No source of bridge-Group 1-learning
  Bridge-Group 1 covering-disabled people
  !
  interface FastEthernet0.2
  encapsulation dot1Q 2
  no ip route cache
  Bridge-Group 2
  No source of bridge-Group 2-learning
  Bridge-Group 2 covering-disabled people
  !
  interface FastEthernet0.6
  encapsulation dot1Q 6
  no ip route cache
  Bridge-Group 6
  No source of bridge-Group 6-learning
  Bridge-Group 6 covering-disabled people

  Bridge IRB

  1 channel ip bridge

  interface control2
  MGMT AP Interface Description
  address 192.168.1.6 IP 255.255.255.0
  no ip route cache

  IP default-gateway 192.168.1.50

  As you can see I can not ping the gateway of AP - I would be very grateful if someone could point me in the right direction with regard to what I'm doing wrong here?

  Thank you

  Mick

  OK means your AP is to have IP vlan2:

  Do it like this and try again:

  !

  interface Dot11Radio0.2
  encapsulation dot1Q 2
  encapsulation dot1Q 2 native
  Group 1 bridge
  Bridge-Group 2
  !
  interface FastEthernet0.2
  encapsulation dot1Q 2
  Group 1 bridge
  encapsulation dot1Q 2 native
  Bridge-Group 2

  !

  Or alternatively, you can delete the name native dot11radio0 and fa0.2. (It should also work without it), but be sure that for vlan 2 you have bridge Group 1.

  Concerning

  Remember messages useful rates

• OfficeJet Pro 8500 a: 8500 a plug the USB to the PC and wireless for Mac

  Our Officejet Pro 8500 a is connected via USB to our HP Pavilion running Windows 7. This connection works well. However, I tried to connect my iMac (OS 10.10.2) to the wireless printer with no success. If I disconnect the USB from the PC, I can connect wirelessly from my Mac. My question is: the Officejet Pro 8500 a does support multiple types of connections - one by USB and the other by wireless? If so, then I would appreciate help to understand why my Mac is not the 8500.

  Other details: our wireless router is Apple Airport Extreme. The wireless connection on the printer seems to work (I can print the details of this connection). However, when I try to add the 8500 to the Mac by using add printer, the printer does not appear. (The printer is lit and shows five bars of signal strength, SSID is correct and a valid IP address).

  My Mac is connected to the wireless network.

  Any suggestions?

  I was able to solve the problem of the printer with ethernet connection to the router that provides network wireless for PC and Mac. Now two machines are able to access the printer with no problems. By connecting with an ethernet cable, connect the printer wireless has been disabled. It had to be done because the wireless radio had become unreliable. The idea was that the blue wireless light never came. Thus by connecting wired LAN, all problems are gone. Thanks to the team of Geed for help.

• DHCP and groups AP assignments

  I'm having a problem where I have AP groups works perfectly fine, but when a customer moves from one building to the other assignment DHCP from the 'first' AP group is preserved when the user accesses AP assigned to another group of AP.

  For example, Laptop1 has an 10.2.1.110 address in AP Group1. When the user moves to an AP in Group 2, the Laptop1 retains the 10.2.1.110 rather than get a new address of Group2.

  Traffic still works perfectly, but I need them to inherit the regimes of intellectual property of the AP group they moved (conditions of the application).

  Our configuration is very similar to this document: http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008073c723.shtml#configs

  We have a controller 4402 with 37 1131 AP all AP is assigned to a group AP in their respective buildings and DHCP VLAN and traffic works perfectly well in each.

  DHCP is offered by a Windows 2003 server as clients wired and wireless must be in the same subnet for the purposes of the application.

  The controller and the AP is in native VLAN 10.

  I'd appreciate any help to determine why the controller or the DHCP server is not recognize the change of the client subnet.

  It is a normal behavior as long as the customer can place an AP on Group1 AP to ap on AP Group2. If you want the device to re-associate one building to another, you need to place the ap on a different WLC with a different mobility group name. If all of the ap is on the same mobility group, then you will have the seamless roaming like what you see.

• Unique SSID from the multiple SSID

  Hello

  We seek to deploy wireless at five sites great campuses, one in each State.

  Does anyone have any ideas on the deployment unique verus multiple SSID SSID for each location.

  Are the benefits of filing a return and security to identify red devices associated with

  a unique SSID.

  The question was raised that it would be easier to configure one SSID to scan wireless

  devices that have separate SSID different places.

  Would appreciate any experience on this design

  Mate,

  Remember, when you're dealing with WLC, you do not configure the APs.  You configure the WLC and configs will be propatated of all APs manages the WLC.

  The WLC, you can use up to 18 SSID but you can configure 1 024.

  Currently, I have three SSIDS and one of them is for VoWLAN.

  Moreover, some hand scanners do not like the (hidden) SSID broadcasting.

• Issue of multiple SSID AP1131

  Hello

  New Cisco wireless, try to understand this.

  I have an ASA who must manage traffic VLAN.

  Vlan1 = default VLAN internal.

  = Reviews VLAN10 VLAN.

  On my AP1131 I want to have "Editorial" associated SSID VLAN1,

  and "Guest" SSID associated VLAN10.

  6 & 7 on the ASA interfaces are PoE so I think I'm good on that.  I have these two ports on the SAA set to Vlan1 and trunks natively.

  My biggest pain is that moment that I can't get 'Guest' and 'Editor' broadcasting at the same time!

  I don't really have a need for 'A' radio, so I'll just try to get the two SSID broadcast on the radio of 'G '.

  I'm setup via the user interface, but frequently glancing at the CLI.

  Is this a common problem?  Something that someone can point to a common mistake?

  Joined running-config; Although I am still much play with him.

  Hi Scott,.

  Check out these excellent two related threads

  https://supportforums.Cisco.com/message/1308205#1308205

  https://supportforums.Cisco.com/message/1286462#1286462

  See you soon!

  Rob

  Thank you to support CSC helps Haiti

  https://supportforums.Cisco.com/docs/doc-8895

  https://supportforums.Cisco.com/docs/doc-8727

• About WLC "one-to-many" designates a LAN VIRTUAL mapped to multiple SSID possible?

  The Cisco Wireless LAN Controller Architecture includes this feature (possibility of configuration)?

  You can map multiple SSID to a VLAN, but you cannot map several VLANS on a SSID.