Virtual AP and Vlan

Hi!

Have made two new interfaces on a MT AP. The first one was a Vlan interface on ethernet and a Virtual AP on Wlan2. Did also put theese new interfaces in a new bridge2. The ethernet port on the AP is connected to a trunk mode port on a Cisco Catalyst 2950. Did also assign an IP adress to the new vlan interface (should it be on bridge2?), but cannot ping or contact it from another switchport on the same vlan. Any suggestions?

PS! The AP has two radios where wlan1 and ethernet1 is in bridge1. This is for transporting the vlan trunk transparent to another site. This is working normally.

Hi!

I Did something similar and it works like a charm.
Did you get get the vlan IDs right?

Ekkehard

Ok, so i did it right in theory? Im sure the vlan IDs are right. We are using v.2.9.26 now. Could there be any bug in this version? Have tested this some months ago with just a vlan ethernet interface with an assigned ip address. We used another version then and it worked.. Cant remember what it was now :confused:
Did that then because we needed a management ip on native vlan (not vlan 1) in the trunk.

if you want to bridge a single vlan then you can’t have primary (ether) and vlan on primary bridged at the same time. bridging decision is performed before vlan untag decision in the input path.
(it’s kind of difficult to explain, just make sure you either bridge ether1 or vlan1 (on ether1), but not both)

other thing is trunking protocol, make sure the switchport is set to 802.1q and not cisco proprietary protocol (which can help). One config that works for us on C3550 and C7200 is;

interface FastEthernet2/0/9
description XXXYYYZZ
switchport access vlan 1200
switchport trunk encapsulation dot1q
switchport trunk native vlan 1200
switchport trunk allowed vlan 160,1200
switchport trunk pruning vlan 160,1200
switchport mode trunk
switchport nonegotiate
spanning-tree portfast trunk
spanning-tree bpdufilter enable
end

this of course is doing more than what you need to do but no form of stp is not used in this case.

on routeros side we have vlan160 on ether1 and vlan160 and wlan1 is in bridge so to speak. vlan1200 is used for management only.

obtw: since cisco puts all vlans in the same bridge unless you specifically add more bridges you -will- feel that pain whenever you come to it. (random loss of connectivity with routeros unit)

OK it was a bit difficult to understad also :smiley:
Our scenario on a AP with Eth1, wlan1 and wlan2:
Ethernet1, wlan1 and wlan2 are in bridge1
Vlan41 (on ethernet1 is) and Virtual AP are in bridge 2

This will not work? Ethernet 1 is connected to a trunk port on a Catalyst 2950 that i suppose only support 802.1q.
We are using Witelcom Dragon II APs.

vlan41 on ether1 wont work while ether1 is a member of a bridge.
Witelcom, no wonder they couldn’t help you :wink: Just Kidding

Damn :cry: Our first priority is to transport our trunks and second to give public access on a different vlan. Tried MT boxes VPN tunneling our trunks, but that didnt either work.. They said this would be no problem, so now i wish to scrap this piece of… or set up separate public APs.
Any suggestions? Create all our vlans in the trunk and put them in bridge1 without physical eth1?

Can anyone else confirm this? Have struggeled for some months now with this problem. If i dont have primary eth1 in a bridge with wds1 (static) and Wlan1 the connection to the remote site fail :confused: Have tried to put wds1 and wlan1 in the same bridge as a vlan (on ether1) but that doesnt help either..