Chapter 9 Configuring a Wireless LAN Connection

Configure the Root Radio Station

Configuration Tasks

Perform the following tasks to configure this network scenario:

Configure the Root Radio Station

Configure Bridging on VLANs

Configure Radio Station Subinterfaces

A configuration example showing the results of these configuration tasks is provided in the “Configuration Example” section on page 9-6.

Note The procedures in this chapter assume that you have already configured basic router features as well as PPPoE or PPPoA with NAT. If you have not performed these configurations tasks, see Chapter 1, “Basic Router Configuration,” Chapter 3, “Configuring PPP over Ethernet with NAT,” and Chapter 4, “Configuring PPP over ATM with NAT,” as appropriate for your router. You may have also configured DHCP, VLANs, and secure tunnels.

Configure the Root Radio Station

Perform these steps to create and configure the root radio station for your wireless LAN, beginning in global configuration mode:

 

 

 

 

Command

Purpose

 

 

 

 

Step 1

 

 

 

 

 

 

interface name number

Enters interface configuration mode for the

 

 

 

 

 

 

radio interface.

 

 

 

 

 

Example:

 

 

 

 

 

 

Router(config)# interface dot11radio 0

 

 

 

 

 

 

Router(config-if)#

 

 

 

 

 

Step 2

 

 

 

 

 

 

broadcast-key [vlan vlan-id]change seconds

Specifies the time interval, in seconds, between

 

 

 

 

 

 

rotations of the broadcast encryption key used

 

 

 

 

 

Example:

for clients.

 

 

 

 

 

Router(config-if)#broadcast-key vlan 1

Note Client devices using static Wired

 

 

 

 

 

change 45

Equivalent Privacy (WEP) cannot use

 

 

 

 

 

Router(config-if)#

 

 

 

 

 

the access point when you enable

 

 

 

 

 

 

 

 

 

 

 

 

broadcast key rotation—only wireless

 

 

 

 

 

 

client devices using 802.1x

 

 

 

 

 

 

authentication (such as Light

 

 

 

 

 

 

Extensible Authentication Protocol

 

 

 

 

 

 

[LEAP], Extensible Authentication

 

 

 

 

 

 

Protocol–Transport Layer Security

 

 

 

 

 

 

[EAP-TLS], or Protected Extensible

 

 

 

 

 

 

Authentication Protocol [PEAP]) can

 

 

 

 

 

 

use the access point.

 

 

 

 

 

 

Note This command is not supported on

 

 

 

 

 

 

bridges.

 

 

 

 

 

 

See the Cisco IOS Commands for Access Points

 

 

 

 

 

 

and Bridges for more details.

 

 

 

 

 

 

 

 

 

 

 

Cisco Secure Router 520 Series Software Configuration Guide

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

9-2

 

 

 

OL-14210-01

 

 

 

 

 

 

Page 96
Image 96
Cisco Systems 520 series manual Configure the Root Radio Station, For clients, Equivalent Privacy WEP cannot use