9-2
Cisco Secure Router 520 Series Software Configuration Guide
OL-14210-01
Chapter 9 Configuring a Wireless LAN Connection
Configure the Root Radio Station
Configuration Tasks
Perform the following tasks to configure this network scenario:
• Configure the Root Radio Station
• Configure Bridging on VLANs
• Configure Radio Station Subinterfaces
A configuration example showing the results of these configuration tasks is provided in the
“Configuration Example” section on page 9-6.
Note The procedures in this chapter assume that you have already configured basic router features as well as
PPPoE or PPPoA with NAT. If you have not performed these configurations tasks, see Chapter 1, “Basic
Router Configuration,” Chapter 3, “Configuring PPP over Ethernet with NAT,” and Chapter 4,
“Configuring PPP over ATM with NAT,” as appropriate for your router. You may have also configured
DHCP, VLANs, and secure tunnels.
Configure the Root Radio Station
Perform these steps to create and configure the root radio station for your wireless LAN, beginning in
global configuration mode:
Command Purpose
Step 1 interface name number
Example:
Router(config)# interface dot11radio 0
Router(config-if)#
Enters interface configuration mode for the
radio interface.
Step 2 broadcast-key [vlan vlan-id] change seconds
Example:
Router(config-if)# broadcast-key vlan 1
change 45
Router(config-if)#
Specifies the time interval, in seconds, between
rotations of the broadcast encryption key used
for clients.
Note Client devices using static Wired
Equivalent Privacy (WEP) cannot use
the access point when you enable
broadcast key rotation—only wireless
client devices using 802.1x
authentication (such as Light
Extensible Authentication Protocol
[LEAP], Extensible Authentication
Protocol–Transport Layer Security
[EAP-TLS], or Protected Extensible
Authentication Protocol [PEAP]) can
use the access point.
Note This command is not supported on
bridges.
See the Cisco IOS Commands for Access Points
and Bridges for more details.