Newsgroup: it.comp.reti.cisco
Titolo: [LUNGO] Bridging e Access point aironet 1200

Ciao a tutti,
vi espongo il mio problema sperando che qualcuno riesca a darmi una mano 
a risolverlo (ho paura di essermi perso in un bicchier d'acqua).
Ho una rete strutturata così:
Internet --- Cisco 1801 (locale) --- (
192.168.1.0/24
) --- Aironet 1200 
--(wireless)-- Linksys wrt54g --- Cisco 1801 (remoto) --- (
192.168.2.0/24
)
Il problema è che un pc della subnet 192.168.1.0 collegato al 1801 
locale non riesce a pingare un pc della subnet 192.168.2.0 collegato al 
1801 remoto.
Mentre è tutto ok se pingo dal linksys un ip della subnet 192.168.2.0 e 
se pingo dal pc l'ip della interfaccia lato 192.168.1.0 del 1801 remoto.
Domanda n. 2: il bridge wireless non dovrebbe esseere trasparente a 
livello ip?
Il linksys è in modalità client con le interfacce wifi e eth in bridging.
L'Aironet è configurato così:
ap#sh run
Building configuration...
Current configuration : 1507 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret 5 $1$gP6X$DJoS8S.CJEE4k9.EWokvw.
!
username cisco password 7 14141B180F0B
ip subnet-zero
!
no aaa new-model
!
!
bridge irb
!
!
interface Dot11Radio0
  no ip address
  no ip route-cache
  !
  ssid test
     max-associations 10
     authentication open
     guest-mode
  !
  speed basic-1.0
  channel 2457
  station-role root
  bridge-group 1
  bridge-group 1 subscriber-loop-control
  bridge-group 1 block-unknown-source
  no bridge-group 1 source-learning
  no bridge-group 1 unicast-flooding
  bridge-group 1 spanning-disabled
!
interface FastEthernet0
  no ip address
  no ip route-cache
  duplex auto
  speed auto
  bridge-group 1
  no bridge-group 1 source-learning
  bridge-group 1 spanning-disabled
!
interface BVI1
  ip address 192.168.1.101 255.255.255.0
  no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path 
http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
bridge 1 protocol ieee
bridge 1 route ip
!
!
!
line con 0
  transport preferred all
  transport output all
line vty 0 4
  login local
  transport preferred all
  transport input all
  transport output all
line vty 5 15
  login
  transport preferred all
  transport input all
  transport output all
!
end
Questa è la conf del 1801 remoto
c1801-gw-lab#sh run
Building configuration...
Current configuration : 1810 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname c1801-gw-lab
!
boot-start-marker
boot-end-marker
!
logging buffered 20000 debugging
enable secret 5 <removed>
!
aaa new-model
!
!
aaa authentication login LOCAL_DB_USERS local
!
aaa session-id common
!
resource policy
!
clock timezone MET 1
clock summer-time MEST recurring last Sun Mar 3:00 last Sun Oct 3:00
no ip gratuitous-arps
!
!
ip cef
!
!
ip name-server 213.140.2.12
ip name-server 213.140.2.21
!
!
!
username matteo secret 5 <removed>
!
!
!
!
!
!
interface FastEthernet0
  ip address 192.168.2.1 255.255.255.0
  duplex auto
  speed auto
!
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
!
interface Vlan1
  ip address 192.168.1.102 255.255.255.0
!
!
!
no ip http server
no ip http secure-server
!
!
control-plane
!
!
line con 0
line aux 0
  no exec
  transport preferred telnet
  transport input telnet
  transport output all
line vty 0 4
  exec-timeout 60 0
  login authentication LOCAL_DB_USERS
  transport preferred telnet
  transport input telnet
!
ntp clock-period 17180143
ntp server 62.173.184.58
!
webvpn context Default_context
  ssl authenticate verify all
  !
  no inservice
!
end
e questa è la conf del 1801 locale
c1801-gw-adsl#sh run
Building configuration...
Current configuration : 9906 bytes
!
! Last configuration change at 00:57:30 MEST Fri Apr 6 2007 by matteo
! NVRAM config last updated at 20:25:26 MEST Thu Apr 5 2007 by matteo
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname c1801-gw-adsl
!
boot-start-marker
boot-end-marker
!
logging buffered 20000 debugging
enable secret 5 removed
!
aaa new-model
!
!
aaa authentication login LOCAL_DB_USERS local
!
aaa session-id common
!
resource policy
!
clock timezone MET 1
clock summer-time MEST recurring last Sun Mar 3:00 last Sun Oct 3:00
no ip gratuitous-arps
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp excluded-address 192.168.1.254
ip dhcp excluded-address 192.168.1.101 192.168.1.103
!
ip dhcp pool CASA_1801
    network 192.168.1.0 255.255.255.0
    default-router 192.168.1.254
    dns-server 151.1.1.1 213.140.2.12
    lease 0 23
!
!
ip name-server 213.140.2.12
ip name-server 151.1.1.1
username matteo secret 5 <Removed>
!
!
!
!
!
!
!
interface FastEthernet0
  no ip address
  load-interval 30
  duplex auto
  speed auto
!
interface FastEthernet0.1
  encapsulation dot1Q 1 native
  ip address 192.168.1.1 255.255.255.0
  ip nat inside
  ip virtual-reassembly
  standby 1 ip 192.168.1.254
  standby 1 timers 10 20
  standby 1 priority 250
  standby 1 preempt
  standby 1 authentication HSRP
!
interface FastEthernet0.5
  encapsulation dot1Q 5
  ip address 172.16.1.254 255.255.255.0
!
!
!
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 192.168.2.0 255.255.255.0 192.168.1.102
!
!
no ip http server
no ip http secure-server
!
!
!
route-map nonat permit 10
  match ip address nonat
!
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
  exec-timeout 60 0
  login authentication LOCAL_DB_USERS
  transport preferred ssh
  transport input telnet ssh
!
ntp clock-period 17180154
ntp server 213.174.171.174
!
end
Grazie 1000
Matteo

 Matteo
-------------------------------------------------------
Messaggio inviato da 
http://www.sandlab.org/newsgroup/
Accesso gratuito via web ai Newsgroup

 
non credo che gli manchi perché la vede direttamente connessa. o sbaglio?
Matteo
c1801-gw-lab#sh ip inter brief
Interface                  IP-Address      OK? Method Status 
     Protocol
FastEthernet0              192.168.3.1     YES manual up 
     up
BRI0                       unassigned      YES NVRAM  administratively 
down down
BRI0:1                     unassigned      YES unset  administratively 
down down
BRI0:2                     unassigned      YES unset  administratively 
down down
FastEthernet1              unassigned      YES unset  up 
     down
FastEthernet2              unassigned      YES unset  up 
     down
FastEthernet3              unassigned      YES unset  up 
     down
FastEthernet4              unassigned      YES unset  up 
     up
FastEthernet5              unassigned      YES unset  up 
     down
FastEthernet6              unassigned      YES unset  up 
     down
FastEthernet7              unassigned      YES unset  up 
     down
FastEthernet8              unassigned      YES unset  up 
     down
ATM0                       unassigned      YES NVRAM  administratively 
down down
Vlan1                      192.168.1.102   YES NVRAM  up 
     up
c1801-gw-lab#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
        D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
        E1 - OSPF external type 1, E2 - OSPF external type 2
        i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS 
level-2
        ia - IS-IS inter area, * - candidate default, U - per-user 
static route
        o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
C    
192.168.1.0/24
 is directly connected, Vlan1
C    
192.168.3.0/24
 is directly connected, FastEthernet0
c1801-gw-lab#

 Matteo



-------------------------------------------------------


 con la classe .3 (ovviamente abilitando IRB )
mmm...puoi spiegare meglio? Perché dovrei mettere in bridge una eth del 
remoto?
Grazie per l'aiuto
Ciao
Matteo

 Matteo
-------------------------------------------------------


 sia in switchport.
Che IOS hai sull'AIRONET? perché io credo che il problema sia che non mi 
fa "routing" ovvero non fa passare reti diverse da quella su cui è 
configurata la BVI. Ho provato anche a togliergli l'ip ma continua ad 
avere problemi.
Il WRT è un trasparent bridge in quanto non ha più indirizzo ip e lavora 
in client mode sull'AIRONET tranquillamente.
Per quello che riguarda il CISCO 1801 remoto la porta eth è in 
switchport di default sulla vlan 1.
Quello che non capisco è che non ci sono errori di config, l'unica cosa 
che può bloccare è l'aironet.
Grazie per l'aiuto e per il tempo che mi hai dedicato testando la mia 
topologia nel tuo lab.
A buon rendere.
(La rete 2.0 è in realtà la rete per il mio lab cisco remotizzabile)
Ciao
Matteo

 topologia nel tuo lab.
prego
ciao.
