Cant share files over wireless network with Cisco 1812w

[MrOyvind]

Hi

I can't share files over the integrated AP in the Cisco 1812w router. Using the same SSID and subnet. What Cisco feature is used to unlock this ? No additional security are applied to dot11 radio interface.

ip dhcp pool POOL_90
import all
network 192.168.90.128 255.255.255.128
default-router 192.168.90.129
dns-server xxxxxx
netbios-node-type h-node

dot11 ssid yourhouse
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxxxxxxx

interface Dot11Radio0
ip address 192.168.90.129 255.255.255.128
ip flow ingress
ip flow egress
ip pim sparse-dense-mode
ip nat inside
ip virtual-reassembly in
zone-member security PRIVATE
ip igmp join-group 239.255.255.250
ip igmp version 3
no logging event link-status
!
encryption mode ciphers aes-ccm
!
ssid yourhouse
!
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2462
station-role root access-point
world-mode dot11d country NO both
ntp broadcast client
ntp broadcast
service-policy input mark_qos
service-policy output trust_qos


Thanks,

Oyvind

 

[unclerico]

can you do anything when connected to this SSID? meaning can you access the Internet?

 

[MrOyvind]

Hi, yes can connect. But can't see other devices.

 

[MrOyvind]

Can it be something wrong with the ARP configuration wireless. The host's cant resolve each other ? The cabled network configured with SVI can share files.

 

[MrOyvind]

After setting up WLAN with BVI and VLAN it works.

 

[MrOyvind]

Poor WLAN network performance and drops after setup with BVI and SVI, any ideas ?

 

[MrOyvind]

The reason for drop, poor performance was misconfiguration of zone based firewall. It must be applied to BVI and SVI, not the dot11 interface.

 

[MrOyvind]

Problems after some hours. Removed ZBFW from SVI, applied it to only BVI. So far so good.

 

[MrOyvind]

Hi, still problems with the wireless connection. CRC and Output errors occurs.

sh int dot11 0
Dot11Radio0 is up, line protocol is up
Hardware is 802.11G Radio, address is 001b.d4d2.2270 (bia 001b.d4d2.2270)
MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/17297/0 (size/max/drops/flushes); Total output drops: 3183
Queueing strategy: fifo
Output queue: 0/30 (size/max)
5 minute input rate 1000 bits/sec, 1 packets/sec
5 minute output rate 1000 bits/sec, 1 packets/sec
120892 packets input, 14226752 bytes, 0 no buffer
Received 1731334 broadcasts (0 IP multicasts)
0 runts, 0 giants, 46 throttles
108 input errors, 8449 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
167386 packets output, 130970301 bytes, 0 underruns
1535 output errors, 0 collisions, 2 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out


bridge irb
bridge 11 protocol ieee
bridge 11 route ip

dot11 ssid yourhouse
vlan 11
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxxxx

interface Dot11Radio0
no ip address
ip directed-broadcast
!
encryption vlan 11 mode ciphers aes-ccm
!
ssid yourhouse
!
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root access-point
world-mode dot11d country NO both


interface Dot11Radio0.11
encapsulation dot1Q 11 native
ip directed-broadcast
bridge-group 11
bridge-group 11 subscriber-loop-control
bridge-group 11 spanning-disabled
bridge-group 11 block-unknown-source
no bridge-group 11 source-learning
no bridge-group 11 unicast-flooding

interface BVI11
ip address 192.168.11.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
zone-member security PRIVATE

interface Vlan11
no ip address
no ip route-cache
bridge-group 11
bridge-group 11 spanning-disabled


VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
11 PRIVATE active Fa2, Fa3, Fa4, Fa6, Fa7, Fa8, Fa9

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
11 enet 100011 1500 - - - - - 0 0


Thanks,

Oyvind

 

[unclerico]

what does your dot110.11 look like?

 

[MrOyvind]

This info ?

sh int dot11 0.11
Dot11Radio0.11 is up, line protocol is up
Hardware is 802.11G Radio, address is 001b.d4d2.2270 (bia 001b.d4d2.2270)
MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 11.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never

 

[MrOyvind]

Forgot this info :

interface Dot11Radio0.11
encapsulation dot1Q 11 native
ip directed-broadcast
bridge-group 11
bridge-group 11 subscriber-loop-control
bridge-group 11 spanning-disabled
bridge-group 11 block-unknown-source
no bridge-group 11 source-learning
no bridge-group 11 unicast-flooding