Objective Configure a site-to-site bridged network. Scenario A remote location several miles away requires connectivity to the existing wired network. The two LAN segments will use a wireless bridge for their physical layer connection using two Cisco Aironet Bridges. Note : This lab uses the two segments of the same network. These two segments, although separated by distance, remain part of the same LAN through the use of a Wireless physical layer link. Topology 1
Preparation The student PC1 should be connected to the AP through a wired network. The AP should be set to factory defaults. Tools and Resources Two AP(Bridges) Two wired LAN segments that will be bridged together (PC1 &PC2) Step1 Basic AP Configuration to both APs (Bridges) Configure Hostnames, Bridge Virtual Interface (BVI) and passwords A sample config is shown for Pod1: ap(config)#hostname Pod1 Pod1(config)#enable secret cisco Pod1(config)#privilege exec level 15 configure Pod1(config)#enable password level 15 cisco Pod1(config)#int bvi 1 Pod1(config-if)#ip address 10.0.1.1 255.255.0.0 Pod1(config-if)# no shutdown Pod1#copy run start. A sample config is shown for Pod2: ap(config)#hostname Pod2 Pod2(config)#enable secret cisco Pod2(config)#privilege exec level 15 configure Pod2(config)#enable password level 15 cisco Pod2(config)#int bvi 1 Pod2(config-if)#ip address 10.0.2.1 255.255.0.0 Pod2(config-if)# no shutdown Pod2#copy run start. 2
Step 2 Connect to AP(Bridge) using the web browser Set PC1:s IP address to 10.0.1.10/16. Make sure that the AP(Bridge) is connected to PC1 by a wired connection. a. Open an Internet browser. b. Type the bridge address http://10.0.1.1, and press Enter. c. A log in screen appears. Type in the password of cisco (case sensitive) and click OK. Set PC2:s IP address to 10.0.2.10/16. Make sure the AP(Bridge) is connected to PC2 by a wired connection. a. Open an Internet browser. b. Type the bridge address http://10.0.2.1, and press Enter. c. A log in screen appears. Type in the password of cisco (case sensitive) and click OK. 3
The AP (bridge) Home page will display the Summary Status of the bridge. 4
Set up the SSID of the bridges: Navigate to the Security and the SSID Manager setup page by selecting the link from the left navigation bar: a. From the Current SSID List, make sure that <NEW> is selected. Configure a new SSID for both bridges to the value: BR1. b. Leave all other fields at their default values. c. Click Apply to save the settings. 5
d. Scroll to the bottom and select the BR1 SSID for the Infrastructure SSID, and click the check box to force infrastructure devices to associate using this SSID (BR1). f. Click Apply to save your settings. 6
Configure the Bridge Settings Using the Express Setup page, configure the bridge with the following settings: Pod1 Default Gateway: 10.0.1.254 Role in Radio Network: Root (For the White Access Point choose Role: Access Point). Pod2 Default Gateway: 10.0.1.254 Role in Radio Network: Non-Root (For the White Access Point choose Role: Workgroup Bridge). What is the BSSID of BPod1? 7
Radio settings for the non-root bridge To ensure that the non-root bridge associates with the correct root bridge, the root parent MAC address can be configured on the non-root bridge. a. Record the MAC address of the root bridge radio. This address can be found on the Summary Status page of the root bridge. b. From the non-root bridge, navigate to the Settings tab of the Radio interface. c. Scroll to the bottom of the settings page to enter the root bridge radio MAC address in the Root Parent MAC address field. Change also Root Parent Timeout till 5-6 sec. Click Apply to save the configuration. 8
View Associations The non-root bridge should now be associated with the root bridge. To view the current associations on each bridge, open a web connection to the bridge from the wired PC. a. Navigate to the bridge IP address. b. Select the Association link from the left navigation bar. All associated devices should appear in the list. For Example: Which devices are listed in the Association table for Pod1? What device is the parent for this association? Which devices are listed in the Association table for Pod2? What device is the parent for this association? 9
Configure static WEP on both bridges a. From the Security: Encryption Manager page, click the radio button next to WEP Encryption and select Mandatory from the drop down list. b. Select the radio button for Encryption Key 1 in the Transmit Key column. Make sure that drop down list has 128-bit selected for Key Size. c. Click in the Encryption Key field and enter a WEP key. For a 128-bit encryption, the key will need to be 26 hexadecimal characters in length. Only the numbers 0-9 and the letters A-F can be used. d. Click Apply to save the WEP Key. e. Repeat the same steps on the other bridge. What does WEP stand for? Would you concider using the WEP standard to encrypt your home-network? Why or why not? Retest the connection From either bridge, navigate to the Association page to view the status of the wireless link. If the bridges do not associate, troubleshoot the static WEP configuration.. Once the wireless bridge link is functional, ping from PC1 to PC2 to test end-to-end connectivity. 10