Cisco Aironet 1602i Questions - Issues - Spiceworks

12/8/2017 Cisco Aironet 1602i questions/issues - Spiceworks
Home > Networking > Cisco
Cisco Aironet 1602i questions/issues
by Jose8923 on Feb 21, 2014 at 4:21 PM
Cisco
Join the Community! Creating your account only takes a few minutes.
Join Now
Background:We have a small office with three remote people using an ASA which provides the DHCP service. We purchased a Cisco WAP551 and configured it and found out
it has a security issue (https://supportforums.cisco.com/message/4157962#4157962 ) so we sent it back. The vendor in turn talked us into the Aironet 1602i, which i have never
configured.
Issue:Out of the box I can get the system to broadcast, but even with no security i can not join the network.
Question: I understand this comes default being an AP to be used with a LAN controller. Can this system work, out of the box, without a LAN controller? I tried to download
the "Autonomous" image and Cisco would not let me as I do not have a service contract. Is there a better system or an easier route. I am considering using Ruckus products
over Cisco as they seem to be much easier to deal with.
Reply 47
Subscribe
Popular Topics in Cisco
Got IT smarts? Test your wits against others! Take the Challenge »
Reconfiguring MX100 installation
https://community.spiceworks.com/topic/448208-cisco-aironet-1602i-questions-issues 1/13
Cisco ASA 5510 Upload Speed issues
Router and Switch
Spiceworks Help Desk
The help desk software for IT. Free.
Track users' IT needs, easily, and with only the features you need.
Learn More »
47 Replies
Sponsored by Spiceworks
Tabasco
Steve612 Feb 21, 2014 at 4:37 PM
Right, you'll need an autonomous IOS on that AP. It will not work with a lightweight IOS without a controller.
The access point works great, you just need the image... You could also look into a Meraki access point. I use one at my house and
it's pretty awesome. I've never used anything with such great features that were so easy to configure. I think it'd be a great fit in
your case.
Datil
mark9586 Feb 22, 2014 at 9:30 AM
AIRCAP1602ixK9 needs a controller. The C = Controller based access point. The i at the end says internal antenna. In place of
the x will be the letter for the region the AP can be used or sold in and the K9 means it has security or cryptographic features.
AIRSAP1602ixK9 is autonomous, ie a Standalone AP with a fully functioning IOS similar to a router or a switch, with features
and functionality of both. The S means Standalone access point. The i at the end means internal antenna... etc etc...
Check the part number. You can flash the lightweight AP to use the autonomous image but to me it seems your reseller has either
badly advised you or shipped the wrong part. Make them put it right. DO NOT try to flash the firmware. It can go horribly wrong
really easily. I have lots of experience with these and I would only flash the firmware as an absolute last resort.
As for configuration, I have no idea if they have a GUI as I do all mine via command line. They aren't difficult if you have
experience with Cisco CLI. If you are new to Cisco CLI then they are a very steep learning curve and not intuitive at all.
The AP itself is excellent. It is well made, powerful and can handle plenty of hosts. I have deployed dozens of them, and dozens of
it's bigger brother the 2602. They have so far proven to be fit and forget.
Serrano
Fred Ferrell Feb 22, 2014 at 1:22 PM
In my opinion you have the best AP there is. Don't change direction on that. I would check the model number like mark9586 said
and if it is the controller model make the reseller replace it with the right one. It does have a web based GUI that you can use to
configure it. I would also recommend getting support for it. It should be around $100/year. If you get that now, you won't have to
send it back since you would be able to reconfigure with the right version of IOS.
Datil
mark9586 Feb 22, 2014 at 4:56 PM
Fred Ferrell wrote:
It does have a web based GUI that you can use to configure it.
How do you get to it? I don't have one to play with right now. Is it CCP or is it built in?
I guess what I'm asking is, what does the quick start guide say?
I'm a CLI guy but it's always good to know this stuff in case I have to guide a non techie through some sort of config change,
heaven forbid!!!
Serrano
mark9586 wrote:
Fred Ferrell wrote:
I'm a CLI guy but it's always good to know this stuff in case I have to guide a non techie through some sort of config change,
heaven forbid!!!
+ expand
Check out this article.
http://www.cisco.com/c/en/us/support/docs/wirelessmobility/wirelesslanwlan/68005wlanconnect.htm...
Pimiento
jlolivas Feb 22, 2014 at 7:37 PM
How can I find if it is CAP or SAP?
It does have a GUI. I have accessed it. I just can not get my computer to connect to it even without security.
Datil
mark9586 Feb 22, 2014 at 8:54 PM
Part number should be on a label on the back of the unit.
Datil
mark9586 Feb 22, 2014 at 8:55 PM
Fred Ferrell wrote:
mark9586 wrote:
Fred Ferrell wrote:
I'm a CLI guy but it's always good to know this stuff in case I have to guide a non techie through some sort of
config change, heaven forbid!!!
Check out this article.
http://www.cisco.com/c/en/us/support/docs/wirelessmobility/wirelesslanwlan/68005wlanconnect.htm...
+ expand
Ta :)
Anaheim
Jose8923 Feb 22, 2014 at 9:02 PM
is there any info on cisco support with regards to the latest IOS? all the documentation i find is for 12.x(x)JA, and the IOS on this
unit is 15.2(x).
Datil
mark9586 Feb 22, 2014 at 9:24 PM
It'll be almost identical.
I guarantee that the commands for setting up wireless SSID's and passwords, configuring interfaces and securing the AP itself, and
pretty much everything else you may need to do like SSH, SNMP, HTTPS login, etc etc will be absolutely identical. As I said
earlier, if you are familiar with the CLI, setting up an AP presents no real issues, even if some commands have been altered
slightly between the two versions.
Anaheim
Jose8923 Feb 22, 2014 at 9:32 PM
Thanks for the reply. I have not setup via CLI. The unit I have is a SAP1602i, so I am doing something really wrong. I just reset
to default and will be starting the process over. I just need a simple configuration that has a corp connection on a VLAN and a
guest connection on another VLAN, using WPA2. I am able to get to the GUI, so I will see what I can do.
Serrano
Take a look at the article I posted above. It should walk you through it.
Pimiento
jlolivas Feb 22, 2014 at 11:42 PM
Thanks. I got one to work but my guest network is not getting an IP address
Serrano
Did you setup a different VLAN for that SSID?
Anaheim
Jose8923 Feb 23, 2014 at 11:24 AM
Yes I setup VLAN 1 with native lan for the corp side, setup VLAN 2 for the guest side. I can see the guest, connect to the guest,
but get a 169.x.x.x ip address. Is there need for me to provide a "network ID" to either or both of them?
Serrano
You probably don't have "ip helper" configured for that VLAN on the AP. You will need to add that. Is VLAN2 a new VLAN that
you setup just for this AP or does it already exist? It is already exists, then you should have your wired uplink setup as a truck on
both the AP and the switch it connects to. If not, you need to add VLAN2 to your switch, but it will need to be L3 or otherwise
you will need to add it to your whole network. The last option is change your guest network to VLAN1. There should be a feature
that you can turn on to prevent hosts from seeing other hosts on the same network when connected through the guest SSID.
Anaheim
Jose8923 Feb 23, 2014 at 12:35 PM
So at this point I have my corporate side working. My SSIDis not broadcastingas desired. I am able to configure it manually
and connect to the network. The guest SSID is broadcasting as desired, I can connect to it, AND it does give me a local IP address
but, now I have no "Sent" packets transferring, and minimal "Received" packets. I have no internet connection with my guest.
I setup the system as follows:
VLAN 1:Native VLAN enabledEnable Public Secure Packet Forwarding disabledRadio 0 enabledRadio 1 enabled
VLAN 2:Native VLAN disabledEnable Public Secure Packet Forwarding enabledRadio 0 enabledRadio 1 enabled
SSID 1: CorporateVLAN 1Band Select disabledRadio0 enabledRadio1 enabledNetwork ID emptyOpen Authentication: enabled
"no additional"Key Management: MandatoryEnable WPA enabled "WPA2WPA PreShared Key
"****************************" ASCII selectedEnable Client MFP on this SSID enabled "optional"[Guest mode is not
enabled so it is not broadcasting]
SSID 2: GuestVLAN 2Band Select disabledRadio0 enabledRadio1 disabledNetwork ID emptyOpen Authentication: enabled "no
additional"Key Management: MandatoryEnable WPA enabled "WPA2WPA PreShared Key "****************************"
ASCII selectedEnable Client MFP on this SSID enabled "optional"Multiple BSSID Beacon: Set SSID as Guest Mode enabled
Guest Mode/Infrastructure SSID SettingsRadio 0:Set Beacon Mode: Multiple BSSID enabledSet Infrastructure SSID: "NONE"
, Force Infrastructure Devices to associate only to this SSID disabled
Radio 1:Set Beacon Mode: Single BSSID enabled Set Single Guest Mode SSID: "NONE"Set Infrastructure SSID: "NONE" ,
Force Infrastructure Devices to associate only to this SSID disabled
Anaheim
Jose8923 Feb 23, 2014 at 12:40 PM
The system will not let me put both SSIDs on the same VLAN, with the same radio. It says that the VLANs have to be unique.
My network is very minimal and I am only setting up the WAP and not the Managed Switch. In most instanced these remote
locations will not have an ASA or a managed switch, merely a Smart PoE switch.
To answer your question we do not have previously setup VLAN2. I just set it up on this AP.
Datil
mark9586 Feb 23, 2014 at 12:47 PM
Correct. Each SSID must reside in it's own VLAN.
From the output above, packet forwarding on VLAN 1 seems to be disabled although the pasting of the output makes it a little
tricky to read.
What do you mean by "local IP address"? If your hosts are getting something other than 169.254.x.x then they can at least see the
DHCP server. I don't think there is anywhere to add the IP HelperAddress config to the AP (I've certainly never done it) 'cos that
usually resides on the switch. Which reminds me, make sure the switchport the AP is connected to is a trunk port. If it's an access
port, it won't work for multiple VLAN's.
Make sure the BVI interface is getting an IP address from the native vlan subnet too. The physical ethernet port does not need an
IP address, nor do the radios.
Anaheim
Jose8923 Feb 23, 2014 at 12:51 PM
Mark9586, this is a simple PoE switch...no switch management at all.
The IP the computer gets at connection for Guest VLAN2 is 192.168.x.x, so it is seeing the DHCP server.
Anaheim
Jose8923 Feb 23, 2014 at 1:46 PM
I guess my final question on this matter is this:
Most of my scenarios will be an office with 510 people having a win 2008 server handling my DHCP. At most an ASA (usually
not), and a Smart/Unmanaged PoE switch. I will need a wireless configuration for my office workers and a guest SSID, for their
clients. I am finding that I can not do this very easily with Cisco products. The WAP551, seemed like a great fit but had a security
issue. It seems that the AIRSAP1602i will need extra hardware. Am I wrong in this assumption? Can I use the 1602 with the
most simplest of networks? If not I am considering going with Ruckus, as Meraki is far more expensive and requires a yearly
service contract and is now owned by Cisco. OR does anyone have any other ideas. The client (a non profit) wants to stay around
the $300$400 range for the AP, and do not want to use a consumer product.
Thank you guys for the help and information, I truly appreciate it and hope to someday reciprocate.
Datil
mark9586 Feb 23, 2014 at 2:09 PM
Unmanaged switch is the key here. Each SSID MUST reside in it's own VLAN with it's own IP subnet. Without the ability to
manage the switch you are stuck with VLAN 1 and a single SSID.
You also are having a terminology misunderstanding here. A Cisco SMART switch is a managed switch and can be configured for
VLAN's. The SG200 range are all managed switches from the 8 port right up to the 48 port.
You can use the 1602 for a single VLAN network but you will only be able to have a single SSID.
Ruckus will behave in the same way. It's not the AP that's at fault here, it's what you are wanting to do. As far as I am aware there
are no enterprise or commercial grade AP's that can run 2 SSID's on a single VLAN and even if they can it's a security risk.
Serrano
Cisco can, but it requires a controller...
Anaheim
Jose8923 Feb 23, 2014 at 2:45 PM
I was just provided the switch is a Cisco SG20008P. AS stated, I did not install this switch, this is attached to a Cisco ASA 5505
which provides the DHCP. With the use of these three pieces of hardware is it possible to configure as I would like?
Subscribe
This discussion has been inactive for over a year.
You may get a better answer to your question by starting a new discussion.
Read these next...
Join millions of IT pros like you
Log in to Spiceworks
Reset community password
Agree to Terms of Service
Connect with

Or
Sign up with your email address
By creating an account, you're agreeing to our Terms of Use, Privacy Policy and to receive emails from Spiceworks.
By creating an account, you're agreeing to our Terms of Use and our Privacy Policy
Not a member? Join the community
Back I agree
Insert code
Language
Apache
Insert Cancel

Cisco Aironet 1602i Questions - Issues - Spiceworks

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Cisco Aironet 1602i Questions - Issues - Spiceworks

Загружено:

Авторское право:

Доступные форматы

12/8/2017 Cisco Aironet 1602i questions/issues - Spiceworks

Вам также может понравиться