czappb 10 Geschrieben 5. Dezember 2007 Melden Teilen Geschrieben 5. Dezember 2007 Zuerst mal das Szenario: Es geht um die Kopplung 2er Netzwerke. Das eine Netzwerk besteht aus einer Firewall(Internet) und einem 1100er Accesspoint (als Accesspoint). An dieses Netz soll ein Switch aus einem anderen Zimmer mittels eines weiteren 1100er als Workgroup Bridge(WGB) angebunden werden und somit die Verbindung zum Internet herstellen. Klingt einfach aber ich finde den Fehler nicht, der verhindert das die WGB sich am AP anmeldet. Das Dot11Radio0 bleibt im Status Reset - scheint keinen Link zu bekommen. Die Hardware: 2x 1100er Accesspoints mit 12.3(8)JEC (befinden sich zum Test im gleichen Zimmer) Hat jemand eine Idee was ich vergessen habe oder wie ich weitere Informationen zur Diagnose erhalte? Hier die Konfig vom AP: ! ! Last configuration change at 19:08:42 MET Wed Dec 5 2007 by xxx ! NVRAM config last updated at 19:02:38 MET Wed Dec 5 2007 by xxx ! version 12.3 no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname ap1 ! no logging console ! clock timezone MET 1 clock summer-time MEST recurring last Sun Mar 2:00 last Sun Oct 3:00 ip subnet-zero ip domain name czapp.local ip name-server 80.69.98.110 ip name-server 62.143.254.4 ! ! aaa new-model ! ! aaa group server radius rad_eap ! aaa group server radius rad_mac ! aaa group server radius rad_acct ! aaa group server radius rad_admin ! aaa group server tacacs+ tac_admin ! aaa group server radius rad_pmip ! aaa group server radius dummy ! aaa authentication login default local aaa authentication login eap_methods group rad_eap aaa authentication login mac_methods local aaa authorization exec default local aaa accounting network acct_methods start-stop group rad_acct aaa session-id common ! dot11 ssid Ascorbinsaeure authentication open authentication key-management wpa infrastructure-ssid wpa-psk ascii 7 *** ! dot11 arp-cache optional ! crypto pki trustpoint TP-self-signed-1697696348 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1697696348 revocation-check none rsakeypair TP-self-signed-1697696348 ! ! crypto ca certificate chain TP-self-signed-1697696348 certificate self-signed 01 xxx quit username MAC-ADDR password 7 MAC-ADDR username MAC-ADDR autocommand exit username MAC-ADDR password 7 MAC-ADDR username MAC-ADDR autocommand exit username xxx privilege 15 secret 5 *** ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! broadcast-key change 600 membership-termination capability-change ! ! ssid Ascorbinsaeure ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 packet retries 128 station-role root access-point rts retries 128 world-mode dot11d country DE indoor no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto no cdp enable bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 192.168.1.2 255.255.255.0 no ip route-cache ! ip default-gateway 192.168.1.1 no ip http server ip http authentication aaa ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! access-list 111 permit tcp any any neq telnet no cdp run radius-server attribute 32 include-in-access-req format %h radius-server vsa send accounting bridge 1 route ip ! ! ! line con 0 access-class 111 in line vty 0 4 access-class 111 in exec-timeout 0 0 ! sntp server 192.53.103.104 end Zitieren Link zu diesem Kommentar
czappb 10 Geschrieben 5. Dezember 2007 Autor Melden Teilen Geschrieben 5. Dezember 2007 Die Konfig der WGB: ! ! Last configuration change at 18:42:22 MET Wed Dec 5 2007 by xxx ! NVRAM config last updated at 18:42:23 MET Wed Dec 5 2007 by xxx ! version 12.3 no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname ap2 ! no logging console ! clock timezone MET 1 clock summer-time MEST recurring last Sun Mar 2:00 last Sun Oct 3:00 ip subnet-zero ip domain name czapp.local ip name-server 80.69.98.110 ip name-server 62.143.254.4 ! ! aaa new-model ! ! aaa group server radius rad_eap ! aaa group server radius rad_mac ! aaa group server radius rad_acct ! aaa group server radius rad_admin ! aaa group server tacacs+ tac_admin ! aaa group server radius rad_pmip ! aaa group server radius dummy ! aaa authentication login default local aaa authentication login eap_methods group rad_eap aaa authentication login mac_methods local aaa authorization exec default local aaa accounting network acct_methods start-stop group rad_acct aaa session-id common ! dot11 ssid Ascorbinsaeure authentication open authentication key-management wpa infrastructure-ssid wpa-psk ascii 7 *** ! dot11 arp-cache optional ! username MAC-ADDR password 7 MAC-ADDR username MAC-ADDR autocommand exit username MAC-ADDR password 7 MAC-ADDR username MAC-ADDR autocommand exit username xxx privilege 15 secret 5 *** ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! broadcast-key change 600 membership-termination capability-change ! ! ssid Ascorbinsaeure ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 packet retries 128 station-role workgroup-bridge rts retries 128 world-mode dot11d country DE indoor no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto no cdp enable bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 192.168.1.4 255.255.255.0 no ip route-cache ! ip default-gateway 192.168.1.1 no ip http server ip http authentication aaa ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! access-list 111 permit tcp any any neq telnet no cdp run radius-server attribute 32 include-in-access-req format %h radius-server vsa send accounting bridge 1 route ip ! ! ! line con 0 access-class 111 in line vty 0 4 access-class 111 in exec-timeout 0 0 ! sntp server 192.53.103.104 end Zitieren Link zu diesem Kommentar
Empfohlene Beiträge
Schreibe einen Kommentar
Du kannst jetzt antworten und Dich später registrieren. Falls Du bereits ein Mitglied bist, logge Dich jetzt ein.