[ marxer @ 13.01.2009. 10:16 ] @
Stavio sam u mrežu AP Cisco 1121 i kreirao na njemu subinterfejse tako da mi podrži vlanove koji postoje u mreži. Zaplet nastupa kada mi dva vlana čiji se DHCP server nalazi na ruteru dobijaju IP adrese bez problema, dok računari koji su na vlanu poslovne mreže i dobijaju IP adrese od Windows servera u stvari ne dobiju ništa. Ako im namestim statičke adrese, mreža funkcioniše OK, ali se u network browseru međusobno vide samo računari na AP-u (ako otkucam \\comp-name to radi) Konfiguracija mreže izgleda otprilike: Code: (ovi ne dobijaju adrese) Poslovni_vlan - Voice_vlan - Guest_vlan (ovi su OK) (Win2003 DHCP) (Cisco ruter DHCP) I Trunk -> Cisco 1121 AP I Cisco2811 I Internet (cable modem) Evo i konfiguracije Ap-a (blago izmenjene) Code: Current configuration : 4602 bytes ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! no logging console enable secret 5 XYZ ! ip subnet-zero ! ! no aaa new-model ! dot11 ssid Data vlan 28 authentication open ! dot11 ssid Guest vlan 30 authentication open ! dot11 ssid Lab vlan 29 authentication open ! dot11 ssid Management vlan 1 authentication open ! dot11 ssid Servis vlan 31 authentication open ! dot11 ssid Voice vlan 100 authentication open ! ! ! username admin privilege 15 password 7 XYZ ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! ssid Data ! ssid Guest ! ssid Lab ! ssid Management ! ssid Servis ! ssid Voice ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root l2-filter bridge-group-acl ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no ip route-cache bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.28 encapsulation dot1Q 28 ip helper-address 192.168.28.1 no ip route-cache bridge-group 28 bridge-group 28 subscriber-loop-control bridge-group 28 input-address-list 728 bridge-group 28 output-address-list 728 bridge-group 28 block-unknown-source no bridge-group 28 source-learning no bridge-group 28 unicast-flooding bridge-group 28 spanning-disabled ! interface Dot11Radio0.29 encapsulation dot1Q 29 no ip route-cache bridge-group 29 bridge-group 29 subscriber-loop-control bridge-group 29 block-unknown-source no bridge-group 29 source-learning no bridge-group 29 unicast-flooding bridge-group 29 spanning-disabled ! interface Dot11Radio0.30 encapsulation dot1Q 30 no ip route-cache bridge-group 30 bridge-group 30 subscriber-loop-control bridge-group 30 input-address-list 700 bridge-group 30 output-address-list 700 bridge-group 30 block-unknown-source no bridge-group 30 source-learning no bridge-group 30 unicast-flooding bridge-group 30 spanning-disabled ! interface Dot11Radio0.31 encapsulation dot1Q 31 no ip route-cache bridge-group 31 bridge-group 31 subscriber-loop-control bridge-group 31 block-unknown-source no bridge-group 31 source-learning no bridge-group 31 unicast-flooding bridge-group 31 spanning-disabled ! interface Dot11Radio0.100 encapsulation dot1Q 100 no ip route-cache bridge-group 100 bridge-group 100 subscriber-loop-control bridge-group 100 input-address-list 700 bridge-group 100 output-address-list 700 bridge-group 100 block-unknown-source no bridge-group 100 source-learning no bridge-group 100 unicast-flooding bridge-group 100 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto ! interface FastEthernet0.1 encapsulation dot1Q 1 native no ip route-cache bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface FastEthernet0.28 encapsulation dot1Q 28 no ip route-cache bridge-group 28 no bridge-group 28 source-learning bridge-group 28 spanning-disabled ! interface FastEthernet0.29 encapsulation dot1Q 29 no ip route-cache bridge-group 29 no bridge-group 29 source-learning bridge-group 29 spanning-disabled ! interface FastEthernet0.30 encapsulation dot1Q 30 no ip route-cache bridge-group 30 no bridge-group 30 source-learning bridge-group 30 spanning-disabled ! interface FastEthernet0.31 encapsulation dot1Q 31 no ip route-cache bridge-group 31 no bridge-group 31 source-learning bridge-group 31 spanning-disabled ! interface FastEthernet0.100 encapsulation dot1Q 100 no ip route-cache bridge-group 100 no bridge-group 100 source-learning bridge-group 100 spanning-disabled ! interface BVI1 ip address 192.168.1.69 255.255.255.0 no ip route-cache ! ip default-gateway 192.168.1.65 ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ! access-list 700 permit 0021.553f.06b4 0000.0000.0000 access-list 700 deny 0000.0000.0000 ffff.ffff.ffff access-list 728 permit 001b.77c0.95c7 0000.0000.0000 access-list 728 permit 0019.d298.5d06 0000.0000.0000 access-list 728 permit 0013.ce47.1247 0000.0000.0000 access-list 728 deny 0000.0000.0000 ffff.ffff.ffff bridge 1 route ip ! ! ! line con 0 line vty 0 4 login local ! end [Ovu poruku je menjao optix dana 13.01.2009. u 12:08 GMT+1] |