Differences

This shows you the differences between two versions of the page.

--- lwc:hardware:ciscoaironet1130 [2021/02/12 10:51] – John Harrison
+++ lwc:hardware:ciscoaironet1130 [2021/03/16 14:48] (current) – John Harrison
@@ Line 1: / Line 1: @@
-==== Notes from things I tried ====
+===== General Information =====
+  * serial port is 9600 baud
+  * to turn something off, put a ''no'' in front of the configuration
+  * to see current configuration ''show configuration''
+  * you can cut/past multiple commands/settings as once
+  * see current virtual lans: ''show vlan''
+  * fastethernet abbreviation is ''fa''
+  * change hostname: ''hostname <HOSTNAME>''
+  * ''ssh''ing in: ''ssh  -c 3des-cbc -oKexAlgorithms=+diffie-hellman-group1-sha1 <USERNAME>@<IP-ADDESS>''
+  * set the channel only with physical Radio0 and not the "virtual" radios. All the SSIDs will always be on the same channel
+  * vlans appear to be intended to be used only with Cisco switchports and perhaps when they are in trunk mode
+    * it appears [[https://sites.google.com/site/chaseerry/cisco-routing/dhcp-relay-agent---one-dhcp-server-for-many-vlans|you can get around this]] by having the access point forward DHCPDISCOVER broadcast packets directly to our DHCP server using the ''ip helper-address'' command.
+<code>router#conf t
+router(config)#int fa0.2
+router(config-subif)#ip helper-address address_of_server
+router(config-subif)#end
+</code>
+  * 8266 with Arduino Wi-Fi library seem happiest with ''encryption mode ciphers aes-ccm''
+==== Multiple SSIDs example ====
 <code>
-configure terminal
+config t
-dot11 ssid filiminAtHarrison
+dot11 ssid LAB2
-ap(config-ssid)#vlan 2
+authentication open
-ap(config-ssid)#mbssid guest-mode
+authentication key-management wpa
-ap(config)#dot11 ssid filiminAtWIN
+! authentication key-management wpa version 2
-ap(config-ssid)#authentication open
+wpa-psk ascii testing123
-ap(config-ssid)#authentication key-management wpa version 2
+vlan 2
-ap(config-ssid)#wpa-psk ascii testing123
+mbssid guest-mode
+exit
------
+int dot11radio0
+mbssid
-ap(config)#int dot11radio0
+!channel 2412
-ap(config-if)#mbssid
+!channel 2437
-ap(config-if)#encryption vlan 2 mode ciphers aes-ccm
+channel 2462
-ap(config-if)#encryption vlan 3 mode ciphers aes-ccm
+encryption vlan 2 mode ciphers aes-ccm tkip
-filiminAtWIN mapped to vlan 1
+! encryption vlan 2 mode ciphers aes-ccm
-filiminAtHarrison mapped to vlan 2
+ssid LAB2
+no shut
+exit
+interface dot11Radio 0.2
+encapsulation dot1Q 2 native
+exit
+int fa0.2
+encapsulation dot1Q 2 native
+exit
+exit
+! --------------------
+config t
+dot11 ssid LAB3
+authentication open
+authentication key-management wpa
+! authentication key-management wpa version 2
+wpa-psk ascii testing123
+vlan 3
+mbssid guest-mode
+exit
+int dot11radio0
+mbssid
+! encryption vlan 3 mode ciphers aes-ccm tkip
+encryption vlan 3 mode ciphers aes-ccm
+ssid LAB3
+no shut
+exit
+interface dot11Radio 0.3
+encapsulation dot1Q 3
+bridge-group 1
+exit
+int fa0.3
+encapsulation dot1Q 3
+exit
+exit
+! --------------------
+config t
+dot11 ssid LAB4
+authentication open
+authentication key-management wpa
+! authentication key-management wpa version 2
+wpa-psk ascii testing123
+vlan 4
+mbssid guest-mode
+exit
+int dot11radio0
+mbssid
+! encryption vlan 4 mode ciphers aes-ccm tkip
+encryption vlan 4 mode ciphers aes-ccm
+ssid LAB4
+no shut
+exit
+interface dot11Radio 0.4
+encapsulation dot1Q 4
+bridge-group 1
+exit
+int fa0.4
+encapsulation dot1Q 4
+exit
+exit
+copy run start
 </code>
+note: see comment about vlans and switchports above. That configuration for the fastethernet **may** be required
 ==== References ====
-  * https://sites.google.com/site/chaseerry/cisco-wireless/1131ag---configuring-multiple-ssids
+  * https://sites.google.com/site/chaseerry/cisco-wireless/1131ag---configuring-multiple-ssids (best reference)
-  * https://docs.google.com/document/d/1NgABdg-aOfQ045B2q-Q9nhHWE-Hz20dadCirKcmSM_0/edit#
+  * https://docs.google.com/document/d/1NgABdg-aOfQ045B2q-Q9nhHWE-Hz20dadCirKcmSM_0/edit# (original configuration of the access points)
   * https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/www.cisco.com/content/en/us/td/docs/wireless/access_point/12-3_7_JA/configuration/guide/i1237sc/s37ssid.html.xml#wp1050468
   * https://groups.google.com/g/cisco2010/c/WqPtZlenuJU
   * https://community.cisco.com/t5/wireless/wireless-ap-not-assigning-ip-address-to-new-clients/m-p/4140883#M215311
   * https://learningnetwork.cisco.com/s/question/0D53i00000KstA2/privilege-level-when-username-command-is-configured
-  *