Konfiguracija mreže izgleda otprilike:
Code:
(ovi ne dobijaju adrese) Poslovni_vlan - Voice_vlan - Guest_vlan (ovi su OK)
(Win2003 DHCP) (Cisco ruter DHCP)
I
Trunk -> Cisco 1121 AP
I
Cisco2811
I
Internet (cable modem)
(ovi ne dobijaju adrese) Poslovni_vlan - Voice_vlan - Guest_vlan (ovi su OK)
(Win2003 DHCP) (Cisco ruter DHCP)
I
Trunk -> Cisco 1121 AP
I
Cisco2811
I
Internet (cable modem)
Evo i konfiguracije Ap-a (blago izmenjene)
Code:
Current configuration : 4602 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
no logging console
enable secret 5 XYZ
!
ip subnet-zero
!
!
no aaa new-model
!
dot11 ssid Data
vlan 28
authentication open
!
dot11 ssid Guest
vlan 30
authentication open
!
dot11 ssid Lab
vlan 29
authentication open
!
dot11 ssid Management
vlan 1
authentication open
!
dot11 ssid Servis
vlan 31
authentication open
!
dot11 ssid Voice
vlan 100
authentication open
!
!
!
username admin privilege 15 password 7 XYZ
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid Data
!
ssid Guest
!
ssid Lab
!
ssid Management
!
ssid Servis
!
ssid Voice
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
l2-filter bridge-group-acl
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.28
encapsulation dot1Q 28
ip helper-address 192.168.28.1
no ip route-cache
bridge-group 28
bridge-group 28 subscriber-loop-control
bridge-group 28 input-address-list 728
bridge-group 28 output-address-list 728
bridge-group 28 block-unknown-source
no bridge-group 28 source-learning
no bridge-group 28 unicast-flooding
bridge-group 28 spanning-disabled
!
interface Dot11Radio0.29
encapsulation dot1Q 29
no ip route-cache
bridge-group 29
bridge-group 29 subscriber-loop-control
bridge-group 29 block-unknown-source
no bridge-group 29 source-learning
no bridge-group 29 unicast-flooding
bridge-group 29 spanning-disabled
!
interface Dot11Radio0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 input-address-list 700
bridge-group 30 output-address-list 700
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
bridge-group 30 spanning-disabled
!
interface Dot11Radio0.31
encapsulation dot1Q 31
no ip route-cache
bridge-group 31
bridge-group 31 subscriber-loop-control
bridge-group 31 block-unknown-source
no bridge-group 31 source-learning
no bridge-group 31 unicast-flooding
bridge-group 31 spanning-disabled
!
interface Dot11Radio0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
bridge-group 100 subscriber-loop-control
bridge-group 100 input-address-list 700
bridge-group 100 output-address-list 700
bridge-group 100 block-unknown-source
no bridge-group 100 source-learning
no bridge-group 100 unicast-flooding
bridge-group 100 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.28
encapsulation dot1Q 28
no ip route-cache
bridge-group 28
no bridge-group 28 source-learning
bridge-group 28 spanning-disabled
!
interface FastEthernet0.29
encapsulation dot1Q 29
no ip route-cache
bridge-group 29
no bridge-group 29 source-learning
bridge-group 29 spanning-disabled
!
interface FastEthernet0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
no bridge-group 30 source-learning
bridge-group 30 spanning-disabled
!
interface FastEthernet0.31
encapsulation dot1Q 31
no ip route-cache
bridge-group 31
no bridge-group 31 source-learning
bridge-group 31 spanning-disabled
!
interface FastEthernet0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
no bridge-group 100 source-learning
bridge-group 100 spanning-disabled
!
interface BVI1
ip address 192.168.1.69 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.65
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
access-list 700 permit 0021.553f.06b4 0000.0000.0000
access-list 700 deny 0000.0000.0000 ffff.ffff.ffff
access-list 728 permit 001b.77c0.95c7 0000.0000.0000
access-list 728 permit 0019.d298.5d06 0000.0000.0000
access-list 728 permit 0013.ce47.1247 0000.0000.0000
access-list 728 deny 0000.0000.0000 ffff.ffff.ffff
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
Current configuration : 4602 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
no logging console
enable secret 5 XYZ
!
ip subnet-zero
!
!
no aaa new-model
!
dot11 ssid Data
vlan 28
authentication open
!
dot11 ssid Guest
vlan 30
authentication open
!
dot11 ssid Lab
vlan 29
authentication open
!
dot11 ssid Management
vlan 1
authentication open
!
dot11 ssid Servis
vlan 31
authentication open
!
dot11 ssid Voice
vlan 100
authentication open
!
!
!
username admin privilege 15 password 7 XYZ
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid Data
!
ssid Guest
!
ssid Lab
!
ssid Management
!
ssid Servis
!
ssid Voice
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
l2-filter bridge-group-acl
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.28
encapsulation dot1Q 28
ip helper-address 192.168.28.1
no ip route-cache
bridge-group 28
bridge-group 28 subscriber-loop-control
bridge-group 28 input-address-list 728
bridge-group 28 output-address-list 728
bridge-group 28 block-unknown-source
no bridge-group 28 source-learning
no bridge-group 28 unicast-flooding
bridge-group 28 spanning-disabled
!
interface Dot11Radio0.29
encapsulation dot1Q 29
no ip route-cache
bridge-group 29
bridge-group 29 subscriber-loop-control
bridge-group 29 block-unknown-source
no bridge-group 29 source-learning
no bridge-group 29 unicast-flooding
bridge-group 29 spanning-disabled
!
interface Dot11Radio0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 input-address-list 700
bridge-group 30 output-address-list 700
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
bridge-group 30 spanning-disabled
!
interface Dot11Radio0.31
encapsulation dot1Q 31
no ip route-cache
bridge-group 31
bridge-group 31 subscriber-loop-control
bridge-group 31 block-unknown-source
no bridge-group 31 source-learning
no bridge-group 31 unicast-flooding
bridge-group 31 spanning-disabled
!
interface Dot11Radio0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
bridge-group 100 subscriber-loop-control
bridge-group 100 input-address-list 700
bridge-group 100 output-address-list 700
bridge-group 100 block-unknown-source
no bridge-group 100 source-learning
no bridge-group 100 unicast-flooding
bridge-group 100 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.28
encapsulation dot1Q 28
no ip route-cache
bridge-group 28
no bridge-group 28 source-learning
bridge-group 28 spanning-disabled
!
interface FastEthernet0.29
encapsulation dot1Q 29
no ip route-cache
bridge-group 29
no bridge-group 29 source-learning
bridge-group 29 spanning-disabled
!
interface FastEthernet0.30
encapsulation dot1Q 30
no ip route-cache
bridge-group 30
no bridge-group 30 source-learning
bridge-group 30 spanning-disabled
!
interface FastEthernet0.31
encapsulation dot1Q 31
no ip route-cache
bridge-group 31
no bridge-group 31 source-learning
bridge-group 31 spanning-disabled
!
interface FastEthernet0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
no bridge-group 100 source-learning
bridge-group 100 spanning-disabled
!
interface BVI1
ip address 192.168.1.69 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.65
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
access-list 700 permit 0021.553f.06b4 0000.0000.0000
access-list 700 deny 0000.0000.0000 ffff.ffff.ffff
access-list 728 permit 001b.77c0.95c7 0000.0000.0000
access-list 728 permit 0019.d298.5d06 0000.0000.0000
access-list 728 permit 0013.ce47.1247 0000.0000.0000
access-list 728 deny 0000.0000.0000 ffff.ffff.ffff
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
[Ovu poruku je menjao optix dana 13.01.2009. u 12:08 GMT+1]
Iskustvo je srazmerno količini uništene opreme ...