Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Connecting 851W WAN/Fe0/4 via trunkport to Core Switch

Status
Not open for further replies.

ciscomeo

Technical User
Jun 9, 2003
94
US
Good to be back here...

Can any one assist me in setting-up our 851W Wireless to our Local network? My objective is to create 2 separate VLAN (public and private) on the wireless end then route those two VLAN to its WAN port going to our Local network.
Local network will route them, public going out to the internet for guest and private to our local lan.

Is this possible?
 
Bridge:
bridge irb

Create your VLAN interfaces:
interface Vlan10
description public
no ip address
bridge-group 10

interface Vlan20
description private
no ip address
bridge-group 20

interface BVI20
description Bridge to private
ip address 192.168.1.1 255.255.255.0

interface BVI10
description Bridge to UNCLASSIFIED
ip address 192.168.0.1 255.255.255.0

bridge 10 route ip
bridge 20 route ip

Trunk your VLANs back to your network:
interface FastEthernet2
switchport mode trunk

Create your radio interfaces:
interface Dot11Radio0
no ip address

ssid private
vlan 20
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 FIRSTwp@K3Y

ssid public
vlan 10
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 OTHERwp@K3Y

interface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10

interface Dot11Radio0.20
encapsulation dot1Q 20
bridge-group 20

You'll need a route:
ip route 0.0.0.0 0.0.0.0 192.168.1.2

You need two DHCP pools:

ip dhcp pool VLAN10
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
lease 4

ip dhcp pool VLAN20
import all
network 192.168.1.0 255.255.255.0
domain-name ourbusiness.com
dns-server 192.168.100.5
default-router 192.168.1.1
lease 4

Um....access lists as well to keep 192.168.0.0 seperate, although maybe the filtering you do on your LAN will cover it.

You need to get the Cisco 800 configuration guide and go through it to do this.




 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top