Unable to access web-interface on Cisco Aironet 1250 AP's

kmanjax · 08-24-2009, 07:44 AM

I am running 3 1250 AP's in autonomous mode and they are connected to a Cisco 3560 switch. The problem that I have run into is that I cannot access the AP's through the web-interface. I cannot even ping the AP's. However, if I go into one of the AP through the CLI, I can ping the other AP's from there. If I connect to my switch, I cannot ping the AP's either.
I am able to connect to them and get out to the network/internet without any problems. I am sure that this is just a simple config issue, but I have been able to find the problem. I am hoping that another set of eyes will be able to see what I have missed. I am posting the configs for both the AP and the switch below.

AP Config

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Media_AP_1
!
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
aaa session-id common
!
!
!
dot11 ssid Media_Center
vlan 10
authentication open
guest-mode
!
dot11 network-map
power inline negotiation prestandard source
!
!
username Cisco password 7 xx
username kevinb2 privilege 15 password 7 xx
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid Media_Center
!
channel 2437
station-role root
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
!
ssid Media_Center
!
dfs band 3 block
channel dfs
station-role root
beacon privacy guest-mode
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
no bridge-group 10 source-learning
bridge-group 10 spanning-disabled
!
interface BVI1
ip address 192.168.100.14 255.255.254.0
no ip route-cache
!
ip default-gateway 192.168.100.1
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779...onfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end

3560 config

Current configuration : 5082 bytes
!
! Last configuration change at 14:20:20 EDT Sun Aug 23 2009
! NVRAM config last updated at 14:20:32 EDT Sun Aug 23 2009
!
version 12.2
no service pad
service timestamps debug datetime msec localtime
service timestamps log datetime localtime show-timezone
service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
logging buffered 25000
enable secret 5 xx
!
no aaa new-model
clock timezone EST -5
clock summer-time EDT recurring
system mtu routing 1500
vtp domain WIRELESS
vtp mode transparent
udld aggressive

ip subnet-zero
ip routing
no ip domain-lookup
ip dhcp excluded-address 192.168.100.1 192.168.100.19
!
ip dhcp pool DATA
network 192.168.100.0 255.255.254.0
dns-server 4.2.2.2 4.2.2.4 4.2.2.6
default-router 192.168.100.1
option 43 hex f108.c0a8.640b.c0a8.640c
lease 0 15
!
!
mls qos map cos-dscp 0 8 16 24 32 46 46 56
!
crypto pki trustpoint TP-self-signed-348834688
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-348834688
revocation-check none
rsakeypair TP-self-signed-348834688
!
!
crypto pki certificate chain TP-self-signed-348834688
certificate self-signed 01
3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33343838 33343638 38301E17 0D393330 33303130 30303035
395A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3334 38383334
36383830 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
EE3B6607 E291E4CE 5F0B3E50 53F5AD62 164B5137 2A6783D2 886F4871 857BF6D8
5988FF30 62D14552 0EFB4B1D 8FDC8937 C91DFBFF 4367AA4C 07F28F15 74911CBE
CDA87D1C 98982331 551D50AC 0299086F 3B95D326 5B792234 13264C15 F014044B
DB44F2E6 C225BA8F BE704628 399D65C6 22212B7B 638C3BBD 770403C3 4DEB0AE5
02030100 01A36730 65300F06 03551D13 0101FF04 05300301 01FF3012 0603551D
11040B30 09820753 77697463 682E301F 0603551D 23041830 16801410 6EFA6330
5415BCF4 3D1FE15B B3D79D86 C3C50330 1D060355 1D0E0416 0414106E FA633054
15BCF43D 1FE15BB3 D79D86C3 C503300D 06092A86 4886F70D 01010405 00038181
0015111C 34394BD4 16212206 EA681781 0027BF76 C135D9A2 A8237041 49DC6FDB
E3563925 B0A85EB7 37CF8362 4BC910BF 93F9F3A7 E40B3702 1A70A249 79234FE1
F5BBE36F 267D24AF 5977A06F 0C767A0C E752042E D19076C3 C850DC59 6B5C0DD8
7E2E610D EA0318C5 FFAEB456 707028F7 168B326F 916625A8 77D5BE56 03341828 3A
quit
!
!
!
errdisable recovery cause link-flap
errdisable recovery interval 60
!
!
macro global description cisco-global | cisco-global
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10
name WIRELESS-LAN
!
vlan 20
name FIREWALL-LAN
!
!
!
!
interface FastEthernet0/1
description OUTSIDE NETWORK
power inline never
switchport access vlan 20
switchport mode access
speed 100
duplex full
spanning-tree portfast
!
interface FastEthernet0/2
description OUTSIDE NETWORK
power inline never
switchport access vlan 20
switchport mode access
speed 100
duplex full
spanning-tree portfast
!
interface FastEthernet0/3
description OUTSIDE NETWORK
power inline never
switchport access vlan 20
switchport mode access
speed 100
duplex full
spanning-tree portfast
!
interface FastEthernet0/4
description OUTSIDE NETWORK
power inline never
switchport access vlan 20
switchport mode access
speed 100
duplex full
spanning-tree portfast
!
interface FastEthernet0/5
description Cisco AP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/6
description Cisco AP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/7
description Cisco AP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/8
description Cisco AP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 192.168.100.1 255.255.254.0
no ip redirects
!
interface Vlan20
ip address 192.168.255.10 255.255.255.0
ip ospf priority 10
!
router ospf 1
router-id 192.168.255.10
log-adjacency-changes
passive-interface Vlan10
network 192.168.0.0 0.0.255.255 area 0.0.0.0
maximum-paths 6
!
ip classless
no ip http server
ip http secure-server
!
!
snmp-server user public public v1
snmp-server user public public v2c
snmp-server community WhatsUp RO
snmp-server community public RO
snmp-server user public public v1
snmp-server user public public v2c
snmp-server host 172.16.100.143 WhatsUp envmon snmp
!
control-plane
!
!
line con 0
line vty 0 4
password 7 xx
login
length 0
line vty 5 15
password 7 xx
login
!
ntp clock-period 36028961
ntp server 132.163.4.102
ntp server 128.227.205.3
end

I greatly appreciate any help that can be provided.

08-24-2009, 07:44 AM	#1 (permalink)
kmanjax Registered User Join Date: Aug 2009 Posts: 1 OS: Vista SP2	Unable to access web-interface on Cisco Aironet 1250 AP's I am running 3 1250 AP's in autonomous mode and they are connected to a Cisco 3560 switch. The problem that I have run into is that I cannot access the AP's through the web-interface. I cannot even ping the AP's. However, if I go into one of the AP through the CLI, I can ping the other AP's from there. If I connect to my switch, I cannot ping the AP's either. I am able to connect to them and get out to the network/internet without any problems. I am sure that this is just a simple config issue, but I have been able to find the problem. I am hoping that another set of eyes will be able to see what I have missed. I am posting the configs for both the AP and the switch below. AP Config version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Media_AP_1 ! ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local ! aaa session-id common ! ! ! dot11 ssid Media_Center vlan 10 authentication open guest-mode ! dot11 network-map power inline negotiation prestandard source ! ! username Cisco password 7 xx username kevinb2 privilege 15 password 7 xx ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! ssid Media_Center ! channel 2437 station-role root bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.10 encapsulation dot1Q 10 no ip route-cache bridge-group 10 bridge-group 10 subscriber-loop-control bridge-group 10 block-unknown-source no bridge-group 10 source-learning no bridge-group 10 unicast-flooding bridge-group 10 spanning-disabled ! interface Dot11Radio1 no ip address no ip route-cache ! ssid Media_Center ! dfs band 3 block channel dfs station-role root beacon privacy guest-mode bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio1.10 encapsulation dot1Q 10 no ip route-cache bridge-group 10 bridge-group 10 subscriber-loop-control bridge-group 10 block-unknown-source no bridge-group 10 source-learning no bridge-group 10 unicast-flooding bridge-group 10 spanning-disabled ! interface GigabitEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface GigabitEthernet0.10 encapsulation dot1Q 10 no ip route-cache bridge-group 10 no bridge-group 10 source-learning bridge-group 10 spanning-disabled ! interface BVI1 ip address 192.168.100.14 255.255.254.0 no ip route-cache ! ip default-gateway 192.168.100.1 ip http server ip http authentication aaa no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779...onfig/help/eag bridge 1 route ip ! ! ! line con 0 line vty 0 4 ! end 3560 config Current configuration : 5082 bytes ! ! Last configuration change at 14:20:20 EDT Sun Aug 23 2009 ! NVRAM config last updated at 14:20:32 EDT Sun Aug 23 2009 ! version 12.2 no service pad service timestamps debug datetime msec localtime service timestamps log datetime localtime show-timezone service password-encryption ! hostname Switch ! boot-start-marker boot-end-marker ! logging buffered 25000 enable secret 5 xx ! no aaa new-model clock timezone EST -5 clock summer-time EDT recurring system mtu routing 1500 vtp domain WIRELESS vtp mode transparent udld aggressive ip subnet-zero ip routing no ip domain-lookup ip dhcp excluded-address 192.168.100.1 192.168.100.19 ! ip dhcp pool DATA network 192.168.100.0 255.255.254.0 dns-server 4.2.2.2 4.2.2.4 4.2.2.6 default-router 192.168.100.1 option 43 hex f108.c0a8.640b.c0a8.640c lease 0 15 ! ! mls qos map cos-dscp 0 8 16 24 32 46 46 56 ! crypto pki trustpoint TP-self-signed-348834688 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-348834688 revocation-check none rsakeypair TP-self-signed-348834688 ! ! crypto pki certificate chain TP-self-signed-348834688 certificate self-signed 01 3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 33343838 33343638 38301E17 0D393330 33303130 30303035 395A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3334 38383334 36383830 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 EE3B6607 E291E4CE 5F0B3E50 53F5AD62 164B5137 2A6783D2 886F4871 857BF6D8 5988FF30 62D14552 0EFB4B1D 8FDC8937 C91DFBFF 4367AA4C 07F28F15 74911CBE CDA87D1C 98982331 551D50AC 0299086F 3B95D326 5B792234 13264C15 F014044B DB44F2E6 C225BA8F BE704628 399D65C6 22212B7B 638C3BBD 770403C3 4DEB0AE5 02030100 01A36730 65300F06 03551D13 0101FF04 05300301 01FF3012 0603551D 11040B30 09820753 77697463 682E301F 0603551D 23041830 16801410 6EFA6330 5415BCF4 3D1FE15B B3D79D86 C3C50330 1D060355 1D0E0416 0414106E FA633054 15BCF43D 1FE15BB3 D79D86C3 C503300D 06092A86 4886F70D 01010405 00038181 0015111C 34394BD4 16212206 EA681781 0027BF76 C135D9A2 A8237041 49DC6FDB E3563925 B0A85EB7 37CF8362 4BC910BF 93F9F3A7 E40B3702 1A70A249 79234FE1 F5BBE36F 267D24AF 5977A06F 0C767A0C E752042E D19076C3 C850DC59 6B5C0DD8 7E2E610D EA0318C5 FFAEB456 707028F7 168B326F 916625A8 77D5BE56 03341828 3A quit ! ! ! errdisable recovery cause link-flap errdisable recovery interval 60 ! ! macro global description cisco-global \| cisco-global ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree extend system-id ! vlan internal allocation policy ascending ! vlan 10 name WIRELESS-LAN ! vlan 20 name FIREWALL-LAN ! ! ! ! interface FastEthernet0/1 description OUTSIDE NETWORK power inline never switchport access vlan 20 switchport mode access speed 100 duplex full spanning-tree portfast ! interface FastEthernet0/2 description OUTSIDE NETWORK power inline never switchport access vlan 20 switchport mode access speed 100 duplex full spanning-tree portfast ! interface FastEthernet0/3 description OUTSIDE NETWORK power inline never switchport access vlan 20 switchport mode access speed 100 duplex full spanning-tree portfast ! interface FastEthernet0/4 description OUTSIDE NETWORK power inline never switchport access vlan 20 switchport mode access speed 100 duplex full spanning-tree portfast ! interface FastEthernet0/5 description Cisco AP switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate ! interface FastEthernet0/6 description Cisco AP switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate ! interface FastEthernet0/7 description Cisco AP switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate ! interface FastEthernet0/8 description Cisco AP switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate ! interface GigabitEthernet0/1 switchport access vlan 10 switchport mode access ! interface Vlan1 no ip address ! interface Vlan10 ip address 192.168.100.1 255.255.254.0 no ip redirects ! interface Vlan20 ip address 192.168.255.10 255.255.255.0 ip ospf priority 10 ! router ospf 1 router-id 192.168.255.10 log-adjacency-changes passive-interface Vlan10 network 192.168.0.0 0.0.255.255 area 0.0.0.0 maximum-paths 6 ! ip classless no ip http server ip http secure-server ! ! snmp-server user public public v1 snmp-server user public public v2c snmp-server community WhatsUp RO snmp-server community public RO snmp-server user public public v1 snmp-server user public public v2c snmp-server host 172.16.100.143 WhatsUp envmon snmp ! control-plane ! ! line con 0 line vty 0 4 password 7 xx login length 0 line vty 5 15 password 7 xx login ! ntp clock-period 36028961 ntp server 132.163.4.102 ntp server 128.227.205.3 end I greatly appreciate any help that can be provided.