Problemi configurazione cisco 857w alice 7mb wifi

Configurazioni per connettività ADSL, ISDN e switch per privati e piccole network

Moderatore: Federico.Lagni

Rispondi
arkino
n00b
Messaggi: 3
Iscritto il: mer 16 giu , 2010 3:24 pm

Sto cercando di configurare il mio nuovo cisco 857w per la mia alice 7mb con ip dinamico. I problemi che ho con l'attuale configurazione allegata sono che non riesco a navigare, non fa il brodcast del SSID e se mi collego con il wifi il dhcp non mi assegna alcun indirizzo ip. Se invece mi collego con il cavo ad una delle porte eth il dhcp mi assegna il primo indirizzo disponibile (10.10.10.2) ma ci vuole parecchio tempo prima che me lo assegni.
Grazie in anticipo per il vostro prezioso aiuto.


yourname#term len 0
yourname#show run
Building configuration...

Current configuration : 6213 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2203120415
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2203120415
revocation-check none
rsakeypair TP-self-signed-2203120415
!
!
crypto pki certificate chain TP-self-signed-2203120415
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32323033 31323034 3135301E 170D3130 30363036 32303331
34365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 32303331
32303431 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B8A0 B3FDE995 CCE88D46 0D4A09ED 3A9D20ED 7C03CAB1 00D105CA CE052168
F644CA92 8394DB27 69A6A7BF A9F008F7 5C51D2AC 33A3CF4F F2350352 515D9121
5D37FE76 9F9BCE6B 909A7A9B AA84E028 60C42A09 ADCBBFE8 C896D4FB B410B610
10F48946 EF3E58AA 3CD47726 D0A1BF60 9A1F2628 976B8B27 AC1E6197 3A72033C
843F0203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 143662FE 2603E134 618F2EE7 64B16D3E 148DE31D
70301D06 03551D0E 04160414 3662FE26 03E13461 8F2EE764 B16D3E14 8DE31D70
300D0609 2A864886 F70D0101 04050003 818100AE 8AB6DDA0 55554EA6 4C512352
96ACE529 DA0DC627 0ED883B1 A65F27F7 CE85ECE2 8F672D76 6ED05085 874CE674
4FB130FA 123C4D69 5A2E6957 9467C025 FF645F21 595AE572 A4BB7D4D 8561442D
3849906B 3614646A B339A9A8 A4F03D1B 7568BEE6 BB769E1B 64A7878A 1B0CB177
D6E31AC4 15F9477A 39DE2420 56BCF5D3 8E396C
quit
dot11 syslog
!
dot11 ssid XXX
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 0 XXXXXXXXXXXX
!
no ip dhcp use vrf connected
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
dns-server 85.37.17.56 85.37.17.7
lease infinite
!
!
ip cef
ip domain name yourdomain.com
ip name-server 85.37.17.56
ip name-server 85.37.17.7
!
!
!
username XXXXXXXXX privilege 15 secret 5 YYYYYYYYYYYYYY
!
archive
log config
hidekeys
!
!
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 8/35
oam-pvc manage
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
broadcast-key vlan 1 change 30
!
!
ssid cdd
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
!
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname XXXXXXXXXXXX
ppp chap password 0 YYYYYYYYYYYYYY
ppp pap sent-username XXXXXXXXXXXX password 0 YYYYYYYYYY
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
access-list 23 permit 10.10.10.0 0.0.0.7
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you
want to use.

-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE
PUBLICLY-KNOWN CREDENTIALS

Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL
NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
Avatar utente
lazzaronetu
Cisco fan
Messaggi: 45
Iscritto il: gio 25 feb , 2010 3:52 pm

prova a inserire nella vlan1> bridge-group 1

poi io la farei diversamente con un interfaccia BVI

ma vediamo se và....
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Cisco Router 887VA-W
IOS Release : c800-universalk9-mz.SPA.156-2.T
xDSL Firmware: VA_A_39d_B_38h3_24h_1
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
arkino
n00b
Messaggi: 3
Iscritto il: mer 16 giu , 2010 3:24 pm

ho provato ad inserire bridge-group 1 nella vlan1, ma continuavo a non navigare e non riuscivo più a pingare il router ed ad accedere con la cisco CP. Ho resettato il router e grazie ai post del forum ho modificato e caricato questa configurazione, ora la connessione funziona ma riesco a navigare solo con la rete cabalta, ho problemi con il wifi e sono:
1)non fa il brodcast del ssid
2)non mi assegna l'ip
3)se assegno io un ip statico non riesco ugualmente a navigare

A seguire la configurazione attuale del router
Current configuration : 5930 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200
logging console critical
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization ipmobile default group rad_pmip
aaa accounting network acct_methods start-stop group rad_acct
!
!
aaa session-id common
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
crypto pki trustpoint TP-self-signed-2203120415
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2203120415
revocation-check none
rsakeypair TP-self-signed-2203120415
!
!
crypto pki certificate chain TP-self-signed-2203120415
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32323033 31323034 3135301E 170D3130 30363036 31373539
30375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 32303331
32303431 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C460 1784257E 48B5FF38 9843553F B0BDD762 9FD7C2D2 A3D346E9 F95137E7
269170F8 32E9766A B36A87DF 337AAEDA 916EA40A 8B2AC7F5 DACE22AC 27589657
94A50255 0192C626 9CED1EEB 6949D931 B2EBF1CE FB859B85 6C5DD82B D18958B3
E42EFEBA 5BADE6CF 6E9F4082 9FC27917 834FD877 5B73DF41 9C7F054A 7AFAEB82
C5D90203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17636973 636F3835 372E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14D0A1A4 F39E22B1 A1A2BE12 B7B85BB1 87AA9640
27301D06 03551D0E 04160414 D0A1A4F3 9E22B1A1 A2BE12B7 B85BB187 AA964027
300D0609 2A864886 F70D0101 04050003 818100BA 4EB5C7AC D3204912 C5F60676
9917BC55 D3A0CEFB 939B158F 7156D47F 21800FC5 4625C6B9 1CEE218A AD8B87BE
9AAFFFD4 940292D8 00D01197 BC198D9F DF35EE8E C884A980 E670E29F 4C72D1D8
97B84724 15F4D507 D7C08F37 EA5B8026 FF5C612A 2E15A78B 50206266 03167C48
91DB9AB0 AA510DBC 23129274 5EECA3D3 D8ED48
quit
dot11 syslog
!
dot11 ssid cdd
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
no ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.50
!
ip dhcp pool sdm-pool1
import all
network 192.168.1.0 255.255.255.0
dns-server 85.37.17.56 85.37.17.7
default-router 192.168.1.1
!
!
ip cef
no ip bootp server
ip domain name yourdomain.com
ip name-server 85.37.17.56
ip name-server 85.37.17.7
!
!
!
username xxxxxxxxxxx privilege 15 secret 5 yyyyyyyyyyyyyyy
!
!
archive
log config
hidekeys
!
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
pvc 8/35
oam-pvc manage
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
ip nat inside
ip virtual-reassembly
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
broadcast-key vlan 1 change 30
!
!
ssid cdd
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1412
!
interface Dialer0
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname xxxxxxxxxxxxxxxxx
ppp chap password yyyyyyyyyyyyyyyyy
ppp pap sent-username xxxxxxxxxxxxxx password yyyyyyyyyyyyy
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.10 4662 interface Dialer0 4662
ip nat inside source static udp 192.168.1.10 4672 interface Dialer0 4672
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
!
control-plane
!
!
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
privilege level 15
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end
Avatar utente
lazzaronetu
Cisco fan
Messaggi: 45
Iscritto il: gio 25 feb , 2010 3:52 pm

se vuoi ti posto la mia conf che funziona a meraviglia...

poi la adatti tu secondo le tue esigenze...
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Cisco Router 887VA-W
IOS Release : c800-universalk9-mz.SPA.156-2.T
xDSL Firmware: VA_A_39d_B_38h3_24h_1
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
arkino
n00b
Messaggi: 3
Iscritto il: mer 16 giu , 2010 3:24 pm

si grazie, cosi la provo e ti faccio sapere
Rispondi