Manuals / Cisco Systems / Power Tools / Saw

Cisco Systems OL-6426-02 manual Configuring a Wireless LAN Connection

Models: OL-6426-02

1 196

Download 196 pages 47.1 Kb

Page 104

Image 104

Chapter 9 Configuring a Wireless LAN Connection

BETA DRAFT - CISCO CONFIDENTIAL

Configuration Tasks

Perform the following tasks to configure this network scenario:

•Configure the Root Radio Station

•Configure Bridging on VLANs

•Configure Radio Station Subinterfaces

An example showing the results of these configuration tasks is shown in the section “Configuration Example.”

Note The procedures in this chapter assume that you have already configured basic router features as well as PPPoE or PPPoA with NAT. If you have not performed these configurations tasks, see Chapter 1, “Basic Router Configuration,” Chapter 3, “Configuring PPP over Ethernet with NAT,” and Chapter 4, “Configuring PPP over ATM with NAT,” as appropriate for your router. You may have also configured DHCP, VLANs, and secure tunnels.

Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide

9-2	OL-6426-02

Page 104

Image 104

Cisco Systems OL-6426-02 manual Configuring a Wireless LAN Connection

Contents

Cisco Systems, Inc Page N T E N T S Configuring Your Router for Ethernet and DSL Access 802.1x Authentication Configure the IPSec Crypto Method and Parameters Configuring Backup Interfaces Chap Configuration Register C-6 OL-6426-02 Preface AudienceVPN OrganizationChapter Title Description Command Conventions ConventionsConvention Description BoldfaceCisco.com Related DocumentsObtaining Documentation Documentation Feedback Cisco Product Security OverviewDocumentation DVD Ordering DocumentationReporting Security Problems in Cisco Products Obtaining Technical AssistanceCisco Technical Support Website An emergency, you can also reach Psirt by telephone 877 408Submitting a Service Request Definitions of Service Request SeverityObtaining Additional Publications and Information Getting Started Page Router Interface Port Label Basic Router ConfigurationInterface Port Labels Viewing the Default Configuration ADSLoISDNATM WAN Shdsl USB ModemExample 1-1 Cisco 1812 Default Configuration on Startup Information Needed for Configuration Configuring Basic Parameters To configure the router, perform one or more of these tasksConfigure Global Parameters Configure Fast Ethernet LAN InterfacesCommand Purpose ExampleConfigure WAN Interfaces Configure the Fast Ethernet WAN InterfaceConfigure the ATM WAN Interface Mode atm ExitController dsl No shutdownConfiguration Example Configure the Wireless InterfaceConfiguring a Loopback Interface Configuring Command-Line Access to the Router Verifying Your ConfigurationPassword password Line aux console tty vty line-numberEnd LoginExec-timeout minutes seconds Configuring Static Routes Exits router configuration mode, and entersPrivileged Exec mode Parameters that can be set, see the Cisco IOS IPVerifying Your Configuration Configuring Dynamic RoutesConfiguration Example Configuring RIP Command TaskRouter rip Version 1Configuring Enhanced Igrp Enters router configuration mode, and enablesEigrp on the router. The autonomous-system Number identifies the route to other Eigrp routersSpecifies a list of networks on which Eigrp is to Be applied, using the IP address of the networkRouterconfig# network Configuring Your Router for Ethernet and DSL Access Page For DSL-Based Network Deployments Sample Network DeploymentsFor Ethernet-Based Network Deployments OL-6426-02 Configuring PPP over Ethernet with NAT Configuration Tasks Command or Action PurposeVpdn enable PPPoEConfigure the Fast Ethernet WAN Interfaces Request-dialinInitiate to ip ip-address Protocol l2f l2tp pppoe anyCisco 1800 integrated services routers have These steps to configure one or both of themConfigures the PPPoE client and specifies Enables the Fast Ethernet interfaceConfigure the Dialer Interface Using a dialer group controls access to Exits the dialer 0 interface configurationAssigns the dialer interface to a dialer group Your routerConfigure Network Address Translation Source source-wildcard Access-list access-list-number deny permitIp nat inside outside Configuration Example Router# show ip nat statistics Configuring PPP over ATM with NAT PPP over ATM with NATPPPoA Sets the PPP authentication method Authentication Protocol ChapSpecifies that the IP address for the dialer Interface is obtained through PPP/IPCP IPCommand Reference, Volume 1 of 4 Routing Configure the ATM WAN Interface Attribute Description Default Value Configure DSL Signaling ProtocolConfiguring Adsl Dsl lom integer Dsl enable-training-log Configuring ShdslVerify the Configuration Ignore-error-duration number Line-mode 4-wire enhanced 4-wire standardWire Configure Network Address Translation Enables the configuration changes just made to About enabling static translation, see the CiscoFE2-FE9 reside to be the inside interface For NATStatic translation, see the Cisco IOS IP Command Exits configuration mode for the ATM interfaceDefines a standard access list permitting addresses Identifies the specified WAN interface as the NATATM0 VLANs Configuring a LAN with Dhcp and VLANsVlan Configure Dhcp Default-router address address2 ...address8 Import allDns-server address address2 ...address8 Domain-name domainIp dhcp pool Verify Your Dhcp ConfigurationRouter# show ip dhcp import Configure VLANs Verify Your Vlan ConfigurationVlan ? ExampleRouter# show vlan-switch VlanSwitch Port Configurations 802.1x Authentication Vlan Trunking Protocol VTPMaximum Switched Virtual Interfaces SVIs Switched Port Analyzer SpanIP Multicast Switching Layer 2 InterfacesPer-Port Storm Control Fallback BridgingSeparate Voice and Data Subnets Igmp SnoopingConfiguring a VPN Using Easy VPN and an IPSec Tunnel InternetCisco Easy VPN Configure the IKE Policy Configure Group Policy Information Crypto isakmp client configuration groupGroup-name default Key nameApply Mode Configuration to the Crypto Map Ip local pool default poolnameEnable Policy Lookup Configure IPSec Transforms and ProtocolsConfigure the IPSec Crypto Method and Parameters Apply the Crypto Map to the Physical Interface Reverse-routeCrypto map map-name seq-num ipsec-isakmp Dynamic dynamic-map-name discoverCreate an Easy VPN Remote Configuration Crypto map map-nameVerifying Your Easy VPN Configuration Crypto ipsec client ezvpn name outside insideCrypto ipsec client ezvpn ezvpnclient connect auto Beta Draft Cisco Confidential Site-to-Site VPN Using an IPSec Tunnel and GRE GRE Tunnels VPNsConfigure a VPN Configure the IKE PolicyAlso enters Internet Security Association Key Example uses 168-bit Data EncryptionLifetime seconds Configure Group Policy InformationGroup 1 2 Enable Policy Lookup Exits IKE group policy configuration mode,Enters global configuration mode Specifies group domain membershipConfigure IPSec Transforms and Protocols Method used to do soSpecifies global lifetime values used when Negotiating IPSec security associationsConfigure the IPSec Crypto Method and Parameters Creates a dynamic crypto map entry, and entersCreates source proxy information for the crypto Map entryConfigure a GRE Tunnel Apply the Crypto Map to the Physical InterfaceMap Applies the crypto map to the interfaceTunnel interface must be configured to Exits interface configuration mode, and returns toEnters ACL configuration mode for the named Access-list-name ACL that is used by the crypto mapConfiguration Example Ip nat outside no cdp enable Beta Draft Cisco Confidential Configuring a Simple Firewall Router with Firewall ConfiguredSeries integrated services router, respectively Fast Ethernet LAN interface the inside interface for NATProtected network Unprotected networkConfigure Access Lists Configure Inspection RulesCreates an access list which prevents Internet Details about this commandInside interface on the router Apply Access Lists and Inspection Rules to InterfacesAssigns the set of firewall inspection rules to Configuring a Simple Firewall Configuration Example Beta Draft Cisco Confidential Configuring a Wireless LAN Connection 1shows a wireless network deploymentConfiguring a Wireless LAN Connection Configure the Root Radio Station Sets the permitted authentication methods for a User attempting access to the wireless LANExits Ssid configuration mode, and enters Interface configuration mode for the wirelessConfigure Bridging on VLANs Station-role repeater rootBridge number crb irb mac-address-table Bridge-group numberSpecified subinterface Configure Radio Station SubinterfacesEnables Ieee 802.1q encapsulation on Exits subinterface configuration mode, Assigns a bridge group to the subinterfaceNo bridge-group 3 unicast-flooding Interface Vlan1 10-1 Sample ConfigurationRouter# show running-config 10-2 Ip dhcp pool vlan310-3 10-4 10-5 10-6 Additional Configuration Options 11-111-2 Configuring Additional Features and Troubleshooting Page 12-1 Configuring Security FeaturesAuthentication, Authorization, and Accounting Configuring AutoSecure Configuring Access ListsConfiguration Commands ACL TypeConfiguring a Cbac Firewall Access GroupsGuidelines for Creating Access Groups Ip access-group number name in out12-4 Configuring Cisco IOS Firewall IDSConfiguring VPNs Configuring Dial Backup and Remote Management Dial Backup Feature Activation MethodsBackup Interfaces 13-113-2 Configuring Backup InterfacesFloating Static Routes 13-3 Configuring Floating Static RoutesEnables RIP routing Configuring Dialer Watch Dialer WatchSpecifies the group number for the watch list 13-413-5 Dial Backup Feature LimitationsDial Backup Type Possible? Dial Backup Method Limitations 13-6 13-7 Example 13-3 Configuring Dial Backup Using Dialer Watch 13-8Configure Isdn Settings 13-913-10 Access-group Ip address negotiatedDialer pool number Dialer-group group-number13-12 Configure the Aggregator and Isdn Peer RouterFor your Cisco router during the ATM network downtime Asynchronous Interface Configuration 13-1313-14 Line Configuration 13-1513-16 Troubleshooting Getting StartedBefore Contacting Cisco or Your Reseller 14-1Adsl Troubleshooting Shdsl TroubleshootingPortFast Troubleshooting 14-2ATM Troubleshooting Commands Ping atm interface CommandShow interface Command 14-314-4 Shutdown commandOutput Cause Router# show atm interface atm Show atm interface Command14-5 Debug atm Commands Guidelines for Using Debug CommandsDebug atm errors Command Field DescriptionDebug atm events Command Router# debug atm errors ATM errors debugging is on Router#14-7 Router# debug atm events Router#Debug atm packet Command Where the keywords are defined as followsOptional ATM interface or subinterface number Example 14-7shows a sample outputSoftware Upgrade Methods Recovering a Lost PasswordATM0 14-9Router# show version Change the Configuration Register14-10 Reset the Router Router# show startup-configPress Return. The following prompt appears Prompt changes to the privileged Exec prompt14-12 Reset the Password and Save Your ChangesReset the Configuration Register Value Managing Your Router with SDM 14-1314-14 Reference Information Page Configuring the Router from a PC One of the configuration topic chapters in this guideCisco IOS Software Basic Skills PC Operating System SoftwareUnderstanding Command Modes Ctrl-Z ExecAs interface atm Configuration mode Routing protocol Appropriate Getting HelpRouter Enter one of the router Router rip, fromYou can now make changes to your router configuration Enable Secret Passwords and Enable PasswordsEntering Global Configuration Mode Using Commands Abbreviating CommandsUndoing Commands Command-Line Error MessagesSummary Saving Configuration ChangesWhere to Go Next OL-6426-02 Concepts AdslNetwork Protocols Routing Protocol OptionsPPP Authentication Protocols Protocol Ideal Topology Metric Routing UpdatesEnhanced Igrp RIPPAP Network Interfaces EthernetDialer Interface Dial BackupBackup Interface NAT Easy IP Phase PPP Fragmentation and Interleaving QoSIP Precedence Cbwfq Low Latency QueuingAccess Lists OL-6426-02 Enable Config-regResets the configuration register ROM MonitorROM Monitor Commands Exits global configuration modeReload Descriptions section in this appendixCommand Descriptions Disaster Recovery with Tftp DownloadTftp Download Command Variables Command DescriptionOptional Variables Variable CommandRequired Variables Using the Tftp Download Command TFTPTIMEOUT= timeTFTPCHECKSUM= setting RetrytimesConfiguration Register Changing the Configuration Register ManuallyChanging the Configuration Register Using Prompts Rommon 1 confregCommand Description Console DownloadDebug Commands Error ReportingContext-Displays processor context for example Frame-Displays an individual stack frameExiting the ROM Monitor OL-6426-02 Common Port Assignments Port Keyword DescriptionNETBIOS-NS NETBIOS-DGMNETBIOS-SSN FingerSee ARP See AALSee ATM IN-1IN-2 See ChapSee CAR Dhcp IN-3Experience, user Extended access list Overview B-11 See also examplesEthernet B-5 Events, ATM, displaying GREIN-5 See LCPSee NCP See PAP See PVCSee PPP See IpcpIN-7 See RIPSee NAT IN-8 Upgrading software, methods for 14-9User Datagram ProtocolSee UDP