文档建议反馈控制台
首页
学习
活动
专区
圈层
工具
MCP广场
文章/答案/技术大牛
发布
首页
学习
活动
专区
圈层
工具
MCP广场
返回腾讯云官网
社区首页 >问答首页 >Cisco AP vlan设置

问Cisco AP vlan设置
EN

Server Fault用户
提问于 2014-07-23 16:41:33
回答 1查看 1.9K关注 0票数 2

从昨晚开始，我一直在绞尽脑汁，整个上午我都在用这款problem...luckily，它还没有进入生产环境。

我做了很多次搜索，并对Cisco up和多个SSID做出了相同的答复，我想我已经尝试了所有的方法，但显然没有。

在这种环境下，有一个思科3550作为核心路由器。

问题中的AP是一个AIR-LAP1142N-A-K9，它已经被配置为自治模式(这个设备没有wifi管理器)，它坐在Cisco 2960 POE交换机上。

代码语言：javascript
运行
复制
**2950 POE Switchport config for applicable ports**:

interface GigabitEthernet1/0/12  
 description WiFi  
 switchport access vlan 101  
 switchport trunk native vlan 11  
 switchport trunk allowed vlan 11,102,228,700  
 switchport mode trunk  
end  

interface GigabitEthernet1/0/28  
 description LINK TO CORE  
 switchport trunk allowed vlan 10,11,101-106,228,700,1002-1005  
 switchport mode trunk  
end  


**Cisco 3550 Switchport config for applicable port:**  
interface GigabitEthernet0/9  
 description Link to 2960-MB-POE  
 switchport trunk encapsulation dot1q  
 switchport trunk allowed vlan 10,11,101-106,228,700,1002-1005  
 switchport mode trunk  
end

所有其他VLANS都按设计/预期工作。VLAN 700是客人wifi，它将DHCP从3550拉出来。所有其他VLAN (所涉VLAN除外)都从MS Server 2008中提取DHCP

从AP，我可以在VLAN上平核心路由器IP (192.168.228.1)，所以中继是工作的。我还可以一直到ms2008dhcp服务器，所以从集群到服务器是很好的。

我可以与AP相关联(当运行"sho dot11 associations“命令时，可以在AP中看到我的MAC地址)，如果我将IP地址设置为静态IP地址，sho dot11 associations命令将显示我的IP地址。

我可以与AP联系，并获得VLAN 102的IP地址

我无法获得VLAN 228的IP地址

我已经尝试了转发器设置相同的所有其他VLANS (从服务器获得DHCP )，这也不起作用，所以我把它留在DHCP的核心。

在cisco 3550上，VLAN设置如下

代码语言：javascript
运行
复制
interface Vlan102
 description VLAN102
 ip address 192.168.102.1 255.255.255.0
 ip helper-address 192.168.9.98
 ip helper-address 192.168.9.103
 ip helper-address 192.168.9.85
 no ip redirects
 no ip unreachables
 no ip proxy-arp

interface Vlan228
 desciption VLAN228
 ip address 192.168.228.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
For testing, DHCP is set up as this (on core 3550)

ip dhcp pool vlan228
   network 192.168.228.0 255.255.255.0
   default-router 192.168.228.1
   dns-server 8.8.8.8 8.8.4.4
   lease 0 8

基于上面的所有内容，对我来说，这意味着我的AP配置有问题。我最好的猜测是，它与子接口或桥接组有关。如果不是那样的话，它可能是3550的路由，但在我的经验中，这将是我第一次不得不告诉核心路由器关于在它上创建的vlan。任何帮助都将不胜感激。

代码语言：javascript
运行
复制
--------BEGIN AP CONFIGURATION----------  

Current configuration : 4949 bytes  
!  
! Last configuration change at 09:58:29 GMT-0 Wed Jul 23 2014  
! NVRAM config last updated at 09:56:11 GMT-0 Wed Jul 23 2014  
! NVRAM config last updated at 09:56:11 GMT-0 Wed Jul 23 2014  
version 15.2  
no service pad  
service timestamps debug datetime msec  
service timestamps log datetime msec  
service password-encryption  
!  
hostname AP12345  
!  
!  
logging rate-limit console 9  
no logging console  
enable secret 5 passwordhasbeenremoved  
!  
no aaa new-model  
clock timezone GMT -0 0  
clock summer-time GMT-0 recurring last Sun Mar 2:00 last Sun Oct 3:00  
no ip cef  
ip domain name myorganization.com  
ip name-server 192.168.x.x  
ip name-server 192.168.x.x  
!  
!  
!  
!  
dot11 mbssid  
dot11 syslog  
dot11 vlan-name VLANNAME1 vlan 102  
dot11 vlan-name VLANNAME2 vlan 228  
dot11 vlan-name MANAGEMENT vlan 11  
!  
dot11 ssid SSID1  
   vlan 102  
   authentication open  
   authentication key-management wpa version 2  
   mbssid guest-mode  
   wpa-psk ascii 7 passwordhasbeenremoved  
!  
dot11 ssid SSID2  
   vlan 228  
   authentication open  
   authentication key-management wpa version 2  
   mbssid guest-mode  
   wpa-psk ascii 7 passwordhasbeenremoved  
!  
!  
dot11 guest  
!  
!  
!  
username user1 privilege 15 secret 5 passwordremoved  
username user2 privilege 15 secret 5 passwordremoved  
!  
!  
bridge irb  
!  
!  
!  
interface Dot11Radio0  
 no ip address  
 no ip route-cache  
 !  
 encryption vlan 102 mode ciphers aes-ccm  
 !  
 encryption vlan 228 mode ciphers aes-ccm  
 !  
 ssid SSID1  
 !  
 ssid SSID2  
 !  
 antenna gain 0  
 speed  basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0  
 power local 8  
 channel 2412  
 station-role root  
 infrastructure-client  
!  
interface Dot11Radio0.11  
 encapsulation dot1Q 11 native  
 no ip route-cache  
 bridge-group 1  
 bridge-group 1 subscriber-loop-control  
 bridge-group 1 spanning-disabled  
 bridge-group 1 block-unknown-source  
 no bridge-group 1 source-learning  
 no bridge-group 1 unicast-flooding  
!  
interface Dot11Radio0.102  
 encapsulation dot1Q 102  
 no ip route-cache  
 bridge-group 102  
 bridge-group 102 subscriber-loop-control  
 bridge-group 102 spanning-disabled  
 bridge-group 102 block-unknown-source  
 no bridge-group 102 source-learning  
 no bridge-group 102 unicast-flooding  
!  
interface Dot11Radio0.228  
 encapsulation dot1Q 228  
 no ip route-cache  
 bridge-group 228  
 bridge-group 228 subscriber-loop-control  
 bridge-group 228 spanning-disabled  
 bridge-group 228 block-unknown-source  
 no bridge-group 228 source-learning  
 no bridge-group 228 unicast-flooding  
!  
interface Dot11Radio1  
 no ip address  
 no ip route-cache  
 !  
 encryption vlan 102 mode ciphers aes-ccm  
 !  
 encryption vlan 228 mode ciphers aes-ccm  
 !  
 ssid SSID1  
 !  
 ssid SSID2  
 !  
 antenna gain 0  
 peakdetect  
 no dfs band block  
 channel 5745  
 station-role root  
!  
interface Dot11Radio1.11  
 encapsulation dot1Q 11 native  
 no ip route-cache  
 bridge-group 1  
 bridge-group 1 subscriber-loop-control  
 bridge-group 1 spanning-disabled  
 bridge-group 1 block-unknown-source  
 no bridge-group 1 source-learning  
 no bridge-group 1 unicast-flooding  
!  
interface Dot11Radio1.102  
 encapsulation dot1Q 102  
 no ip route-cache  
 bridge-group 102  
 bridge-group 102 subscriber-loop-control  
 bridge-group 102 spanning-disabled  
 bridge-group 102 block-unknown-source  
 no bridge-group 102 source-learning  
 no bridge-group 102 unicast-flooding  
!  
interface Dot11Radio1.228  
 encapsulation dot1Q 228  
 no ip route-cache  
 bridge-group 228  
 bridge-group 228 subscriber-loop-control  
 bridge-group 228 spanning-disabled  
 bridge-group 228 block-unknown-source  
 no bridge-group 228 source-learning  
 no bridge-group 228 unicast-flooding  
!  
interface GigabitEthernet0  
 no ip address  
 no ip route-cache  
 duplex auto  
 speed auto  
 bridge-group 1  
 bridge-group 1 spanning-disabled  
 no bridge-group 1 source-learning  
!  
interface GigabitEthernet0.11  
 encapsulation dot1Q 11  
 no ip route-cache  
 bridge-group 11  
 bridge-group 11 spanning-disabled  
 no bridge-group 11 source-learning  
!  
interface GigabitEthernet0.102  
 encapsulation dot1Q 102  
 no ip route-cache  
 no cdp enable  
 bridge-group 102  
 bridge-group 102 spanning-disabled  
 no bridge-group 102 source-learning  
!  
interface GigabitEthernet0.228  
 encapsulation dot1Q 228  
 no ip route-cache  
 no cdp enable  
 bridge-group 228  
 bridge-group 228 spanning-disabled  
 no bridge-group 228 source-learning  
!  
interface BVI1  
 ip address 192.168.9.133 255.255.255.0  
 no ip route-cache  
 ipv6 address dhcp  
 ipv6 address autoconfig  
 ipv6 enable  
!  
ip default-gateway 192.168.9.1  
ip forward-protocol nd  
no ip http server  
no ip http secure-server  
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag  
!  
!  
bridge 1 route ip  
!  
!  
!  
line con 0  
 privilege level 15  
line vty 0 4  
 login local  
 transport input ssh  
line vty 5 15  
 login  
 transport input ssh  
!  

sntp server 165.193.126.229  
sntp server 216.171.112.36  
sntp server 206.246.122.250  
end  

------------------END AP CONFIGURATION---------------
cisco
dhcp
access-point
EN

回答 1

Server Fault用户

发布于 2014-07-24 18:29:29

为了获得更多细节，我忘了在POE switch...see上设置正确的vlan。这件事已经解决了，我觉得很愚蠢。

票数 1
EN
页面原文内容由Server Fault提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：

https://serverfault.com/questions/614899

复制
相关文章

相似问题

领券

腾讯云开发者

扫码关注腾讯云开发者

扫码关注腾讯云开发者

领取腾讯云代金券

热门产品

热门推荐

更多推荐

Copyright © 2013 - 2025 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有 

深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 深公网安备号 44030502008569

腾讯云计算（北京）有限责任公司 京ICP证150476号 |  京ICP备11018762号 | 京公网安备号11010802020287

问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档