Zusammenfassung für WLAN Einstellungen AIR-AP1232AG

[Nightwalker_z 10]

Hallo zusammen,

 

da die Cisco Doku bezogen auf die WLAN-AccessPoints ziemlich unvollständig ist, sind hier ein paar Ergänzungen an denen ich ein wenig geknabbert habe. Daran will ich euch natürlich teilhaben lassen :D

(Achtung - erst ab IOS 12.3(4))

 

WEP Verschlüsselung (ohne VLANs)

dot11 ssid wlan-wep128 [i]eigener SSID bezeichner (Achtung! Groß- / Kleinschreibung)[/i] 
  authentication open 
!
interface Dot11Radio0
  encryption key 3 size 128bit [i]WEP-Schlüssel(28Hex-Ziffern)[/i] transmit-key
  encryption mode wep mandatory
  ssid wlan-wep128

 

WPA-PSK Verschlüsselung (ohne VLANs)

dot11 ssid wlan-wpa-psk [i]eigener SSID bezeichner (Achtung! Groß- / Kleinschreibung)[/i] 
  authentication open 
  authentication key-management wpa
  wpa-psk ascii [i]WPA-Preshared Key[/i]
!
interface Dot11Radio0
  encryption mode ciphers tkip 
  broadcast-key change 1500  
  ssid wlan-wpa-psk

 

WPA2 Personal Verschlüsselung (ohne VLANs)

dot11 ssid wlan-wpa2 [i]eigener SSID bezeichner (Achtung! Groß- / Kleinschreibung)[/i] 
  authentication open 
  authentication key-management wpa
  wpa-psk ascii [i]WPA-Preshared Key[/i]
!
interface Dot11Radio0
  encryption mode ciphers aes-ccm
  broadcast-key change 1500  
  ssid wlan-wpa2

 

 

Hier ist noch mal eine gesamte Konfig mit SSID-to-VLAN Mapping mit WEP, WPA-PSK und WPA2 Personal:

!
version 12.3
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname [i]Name des Access-Points[/i]
!
enable secret [i]Enable Secret Passwort [/i]
!
ip subnet-zero
ip name-server [i]DNS-Server[/i]
!
no aaa new-model
!
dot11 ssid wlan-wep128
  vlan 2
  authentication open 
!
dot11 ssid wlan-wpa-psk
  vlan 3
  authentication open 
  authentication key-management wpa
  wpa-psk ascii [i]WPA-Preshared Key[/i]
!
dot11 ssid wlan-wpa2
  vlan 4
  authentication open 
  authentication key-management wpa
  wpa-psk ascii [i]WPA-Preshared Key[/i]
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 2 key 3 size 128bit [i]WEP-Schlüssel(28Hex-Ziffern)[/i] transmit-key
!
encryption vlan 2 mode wep mandatory
!  
encryption vlan 3 mode ciphers tkip [i](WPA-PSK ohne Authentication)[/i]
!
encryption vlan 4 mode ciphers aes-ccm [i](WPA2 Personal ohne Authentication)[/i]
!
broadcast-key vlan 3 change 1500
!
broadcast-key vlan 4 change 1500
!
!
ssid wlan-wep128
!
ssid wlan-wpa-psk
!
ssid wlan-wpa2
!
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2412
station-role root
no dot11 extension aironet
no cdp enable
bridge-group 1
!
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 11
!
interface Dot11Radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 12
!
interface Dot11Radio0.4
encapsulation dot1Q 4
no ip route-cache
bridge-group 13
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
!
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 11
!
interface FastEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 12
!
interface FastEthernet0.4
encapsulation dot1Q 4
no ip route-cache
bridge-group 13
!
interface BVI1
ip address [i]Management-IP[/i] [i]Subnetmask[/i]
no ip route-cache
!
ip default-gateway [i]Default Gateway[/i]
no ip http server
no ip http secure-server
ip radius source-interface BVI1 
!
control-plane
!
bridge 1 route ip
!
!
!
[i]Line CON und Line VTY[/i]