For SSH login to this device
Bridge IRB
Bridge 1 Route IP turn on routing function
Interface BVI1
IP address 10.15.106.44 255.255.255.0 own addresses
!
IP default-gateway 10.15.106.1 Gateway
IP forward-protocol nd
IP HTTP Server
No IP http secure-server
IP http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
IP Route 0.0.0.0 0.0.0.0 10.15.106.1
VLAN Configuration
dot11 Vlan-name Mgmt VLAN 330 330 is used to log on to this AP
dot11 vlan-name User VLAN 332 332 is provided to users to connect the
Open SSH
Crypto key gene RSA General-key mod 1024
IP SSH ver 2
Interface GigabitEthernet0
No IP address
Duplex Auto
Speed auto
!
Interface GigabitEthernet0.330//physical sub-interface number to be the same as the VLAN number behind the dot1q
Encapsulation dot1q Native//Let management VLAN330 provide services from this physical sub-interface
Bridge-group 1//Call Bridge Group to activate this port's routing function, in this step can ssh, of course, there is a premise is to set up a local account and enable password
Bridge-group 1 spanning-disabled
No Bridge-group 1 source-learning
!
To provide wireless services to users
SSID Configuration
Dot11 SSID Pchome-1
VLAN 332
Authentication Open
Authentication key-management WPA Version 2 encryption method
Guest-mode//This command is used to open, equivalent to the role of a switch! It's important!
WPA-PSK ASCII 7 045d0f1e1a78145a1b1a57 This place to play password, show is garbled, in fact, this 7 plus space behind your password
Wireless Radio Configuration
Radio 0 is 2.4GHz, Radio 1 is 5GHz, two configuration is the same, here is 0
Interface Dot11radio0
No IP address
IP helper-address 192.168.0.1
!
Encryption VLAN 332 mode ciphers AES-CCM TKIP//Here is a description of the 332 VLAN sent to the user
!
SSID Pchome-1 calls the SSID that was just created
!
Antenna gain 0
Stbc
Beamform OFDM
Station-role Root
Bridge-group 1
Bridge-group 1 Subscriber-loop-control
Bridge-group 1 Block-unknown-source
No Bridge-group 1 source-learning
No Bridge-group 1 unicast-flooding
!
Interface dot11radio0.332
Encapsulation dot1q 332//This is also the calling VLAN, and the VLAN numbers behind the sub-interfaces and dot1q must also be consistent
IP helper-address 192.168.0.1
Bridge-group 255
Bridge-group 255 Subscriber-loop-control
Bridge-group 255 spanning-disabled
Bridge-group 255 Block-unknown-source
No Bridge-group 255 source-learning
No Bridge-group 255 unicast-flooding
Don't forget to put dot11 0 and 1 No shut to open these two bands radio
A few of the frequently used show commands
Pchome-ap7#sho IP int BR
Interface ip-address OK? Method Status Protocol
BVI1 10.15.106.44 YES Manual up
Dot11radio0 Unassigned YES unset up
dot11radio0.332 Unassigned YES unset up
Dot11radio1 Unassigned YES unset up
dot11radio1.332 Unassigned YES unset up
GigabitEthernet0 Unassigned YES unset up
GigabitEthernet0.330 Unassigned YES unset up
GigabitEthernet0.332 Unassigned YES unset up
The show IP int br is used to look at the port up-down, if you see RADIO1 and its sub-interface is down the description of 5GHz is not in the hair
Pchome-ap7#sho dot11 Bssid
Interface BSSID Guest SSID
Dot11radio0 08cc.6867.5320 Yes pchome-1
Dot11radio1 08cc.6869.5160 Yes pchome-1
To see the status of the radio in two bands, guest shows Yes below the transmit signal
Pchome-ap7#show dot11 Associations Client
802.11 Client stations on DOT11RADIO1:
SSID [pchome-1]:
MAC address IP address Device Name Parent state
C0ee.fb01.3bb6 192.168.1.108 unknown-self Assoc
pchome-ap7#
Use to see which client is connected above, which radio
Configuration of the upstream switch
Interface GIGABITETHERNET1/0/48
Description Cn-sha1-10-ap1242ag-1
Switchport trunk Native VLAN//native VLAN write management VLAN for AP
Switchport mode Trunk
End
Cisco 12 Series AP initialization configuration-Initialize configuration