Cisco Router 860, 880 Series User Manual

CH A P T E R
 
13-1
Book Title
OL-xxxxx-xx
13
Configuring VLANs
This chapter describes how to configure an access point to operate with the VLANs set up on a wired 
LAN. This chapter includes in the following sections:
 Understanding VLANs, page 13-1
 Configuring VLANs, page 13-3
 VLAN Configuration Example, page 13-8
Understanding VLANs
A VLAN is a switched network that is logically segmented by functions, project teams, or applications; 
rather than segmented on a physical or geographical basis. For...

 
13-2
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Understanding VLANs
If 802.1q is configured on the Fast Ethernet interface of an access point, the access point always sends 
keepalives on VLAN1 even if VLAN 1 is not defined on the access point. As a result, the Ethernet switch 
connects to the access point and generates a warning message. There is no loss of function on either the 
access point or the switch. However, the switch log contains meaningless messages that may cause more...

 
13-3
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Configuring VLANs
Related Documents
These following documents provide more detailed information about VLAN design and configuration:
 Cisco IOS Switching Services Configuration Guide. Click this link to browse to this document: 
http://cisco.com/en/US/products/sw/iosswrel/ps5187/prod_configuration_guide09186a008017d12
9.html
 Cisco Internetwork Design Guide. Click this link to browse to this document:...

 
13-4
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Configuring VLANs
 Assigning Names to VLANs, page 13-6
 Using a RADIUS Server to Assign Users to VLANs, page 13-7
 Viewing VLANs Configured on the Access Point, page 13-8
Configuring a VLAN
NoteWhen you configure VLANs on access points, the Native VLAN must be VLAN1. In a single 
architecture, client traffic received by the access point is tunneled through an IP-GRE tunnel, which is 
established on the access point’s Ethernet interface...

 
13-5
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Configuring VLANs
Step 3ssid ssid-stringCreates an SSID and enters SSID configuration mode for the 
new SSID. The SSID can consist of up to 32 alphanumeric 
characters. SSIDs are case sensitive.
The first character cannot contain the following characters:
 Exclamation point (!)
 Pound sign (#)
 Semicolon (;)
The following characters are invalid and cannot be used in an 
SSID:
 Plus sign (+)
 Right bracket (])
 Front slash (/)
 Quotation...

 
13-6
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Configuring VLANs
The following example shows how to:
 Name an SSID
 Assign the SSID to a VLAN
 Enable the VLAN on the radio and Ethernet ports as the native VLAN
ap# configure terminalap(config)# interface dot11radio0
ap(config-if)# ssid batman
ap(config-ssid)# vlan 1ap(config-ssid)# exit
ap(config)# interface dot11radio0.1
ap(config-subif)# encapsulation dot1q 1 nativeap(config-subif)# exit
ap(config)# interface fastEthernet0.1...

 
13-7
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  Configuring VLANs
Creating a VLAN Name
To assign a name to a VLAN follow these steps, beginning in privileged EXEC mode:
Use the no form of the command to remove the name from the VLAN. To list all the VLAN name and 
ID pairs configured on the access point, use the show dot11 vlan-name in privileged EXEC mode.
Using a RADIUS Server to Assign Users to VLANs
You can configure your RADIUS authentication server to assign users or groups of...

 
13-8
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  VLAN Configuration Example
Viewing VLANs Configured on the Access Point
In privileged EXEC mode, use the show vlan command to view the VLANs that the access point 
supports. This is sample output from a show vlan command:
Virtual LAN ID:  1 (IEEE 802.1Q Encapsulation)
   vLAN Trunk Interfaces:  Dot11Radio0FastEthernet0
Virtual-Dot11Radio0
 This is configured as native Vlan for the following interface(s) :
Dot11Radio0...

 
13-9
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  VLAN Configuration Example
Managers configure their wireless client adapters to use SSID boss, faculty members configure their 
clients to use SSID teach, and students configure their wireless client adapters to use SSID learn. When 
these clients associate to the access point, they automatically belong to the correct VLAN.
You would complete these steps to support the VLANs in this example:
1.Configure or confirm the configuration of...

 
13-10
Book Title
OL-xxxxx-xx
Chapter 13      Configuring VLANs
  VLAN Configuration Example
Ta b l e 13-3 shows the results of the configuration commands in Ta b l e 13-2. Use the show running 
command to display the running configuration on the access point.
Notice that when you configure a bridge group on the radio interface, these commands are set 
automatically:
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-sourceno bridge-group 2 source-learning
no bridge-group 2...