Zuerst mal das Szenario:
Es geht um die Kopplung 2er Netzwerke.
Das eine Netzwerk besteht aus einer Firewall(Internet) und einem 1100er Accesspoint (als Accesspoint). An dieses Netz soll ein Switch aus einem anderen Zimmer mittels eines weiteren 1100er als Workgroup Bridge(WGB) angebunden werden und somit die Verbindung zum Internet herstellen.
Klingt einfach aber ich finde den Fehler nicht, der verhindert das die WGB sich am AP anmeldet. Das Dot11Radio0 bleibt im Status Reset - scheint keinen Link zu bekommen.
Die Hardware:
2x 1100er Accesspoints mit 12.3(8)JEC (befinden sich zum Test im gleichen Zimmer)
Hat jemand eine Idee was ich vergessen habe oder wie ich weitere Informationen zur Diagnose erhalte?
Hier die Konfig vom AP:
Code:
!
! Last configuration change at 19:08:42 MET Wed Dec 5 2007 by xxx
! NVRAM config last updated at 19:02:38 MET Wed Dec 5 2007 by xxx
!
version 12.3
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname ap1
!
no logging console
!
clock timezone MET 1
clock summer-time MEST recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
ip domain name czapp.local
ip name-server 80.69.98.110
ip name-server 62.143.254.4
!
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
!
dot11 ssid Ascorbinsaeure
authentication open
authentication key-management wpa
infrastructure-ssid
wpa-psk ascii 7 ***
!
dot11 arp-cache optional
!
crypto pki trustpoint TP-self-signed-1697696348
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1697696348
revocation-check none
rsakeypair TP-self-signed-1697696348
!
!
crypto ca certificate chain TP-self-signed-1697696348
certificate self-signed 01
xxx
quit
username MAC-ADDR password 7 MAC-ADDR
username MAC-ADDR autocommand exit
username MAC-ADDR password 7 MAC-ADDR
username MAC-ADDR autocommand exit
username xxx privilege 15 secret 5 ***
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
broadcast-key change 600 membership-termination capability-change
!
!
ssid Ascorbinsaeure
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
packet retries 128
station-role root access-point
rts retries 128
world-mode dot11d country DE indoor
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no cdp enable
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 192.168.1.2 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
no ip http server
ip http authentication aaa
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
access-list 111 permit tcp any any neq telnet
no cdp run
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
exec-timeout 0 0
!
sntp server 192.53.103.104
end
1100er Workgroup Bridge - keine Verbindung
