I'm using a Cisco 871w Router, and am using the CLI template available on TechRepublic, http://downloads.techrepublic.com.com/abstract.aspx?docid=256394
I have tried using differnet Wireless security, but currently using WPA.
See config below:
service password-encryption
hostname MTCU-2
enable secret -----
enable password -----
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
ip http server
ip http secure-server
line con 0
password -----
line vty 0 4
password -----
ip domain name -----.co
no ip domain lookup
username ----- privilege 15 password -----
ip dhcp excluded-address 192.168.14.100 192.168.14.125
ip dhcp excluded-address 192.168.15.100 192.168.15.110
service dhcp
ip dhcp pool Internal-net
network 192.168.14.1 255.255.255.0
default-router 192.168.14.1
import all
domain-name -----.co
lease 4
ip dhcp pool VLAN20
network 192.168.15.1 255.255.255.0
default-router 192.168.15.1
import all
domain-name -----.co
lease 4
vpdn enable
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username password
ppp ipcp dns request
ppp ipcp address accept
access-list 1 permit 192.168.14.1 0.0.0.255
access-list 1 permit 192.168.15.1 0.0.0.255
dialer-list 1 protocol ip list 1
ip nat inside source list 1 interface Dialer1 overload
ip access-list extended Guest-ACL
deny ip any 192.168.14.1 0.0.0.255
permit ip any any
interface FastEthernet4
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
ip route 0.0.0.0 0.0.0.0 Dialer1
interface FastEthernet0
spanning-tree portfast
interface FastEthernet1
spanning-tree portfast
interface FastEthernet2
spanning-tree portfast
interface FastEthernet3
spanning-tree portfast
bridge irb
interface Dot11Radio0
encryption vlan 1 mode ciphers tkip
encryption vlan 20 mode ciphers tkip
ssid GuestWLAN
vlan 20
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii helpme
ssid MTCU-2
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii helpme
channel 11
no cdp enable
no dot11 extension aironet
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no snmp trap link-status
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio0.20
description Guest wireless LAN - routed WLAN
encapsulation dot1Q 20
ip address 192.168.15.1 255.255.255.0
ip access-group Guest-ACL in
ip nat inside
interface Vlan1
description Internal Network
ip nat inside
ip virtual-reassembly
bridge-group 1
bridge-group 1 spanning-disabled
interface BVI1
description Bridge to Internal Network
ip address 192.168.14.1 255.255.255.0
ip nat inside
ip virtual-reassembly
bridge 1 route ip
int f0
no shut
int f1
no shut
int f2
no shut
int f3
no shut
int f4
no shut
int dot0
no shut
ip inspect name MYFW tcp
ip inspect name MYFW udp
ip access-list extended Internet-inbound-ACL
permit udp any eq bootps any eq bootpc
permit icmp any any echo
permit icmp any any echo-reply
permit icmp any any traceroute
permit gre any any
permit esp any any
int dialer1
ip inspect MYFW out
ip access-group Internet-inbound-ACL in
I will provide any other info needed!!
Thanks everyone
