ISR

Integrated Services Router.

That’s the technology for my first case. Configuring wireless on the router. Basically, the issue is an initial configuration for the wireless. It was funny that I don’t even know how to do that. But of course, with the help of my colleague, I was able to configure the wireless side of this router and I am very lucky that customer only requires open-authentication with wpa-psk.

Below are the configuration that I have done:

1. Enable IRB on the router

• router(config)#bridge irb

2. Define a workgroup bridge

• router(config)#bridge 1

3. Choose the spanning tree protocol for the bridge group.

• router(config)#bridge 1 protocol ieee

4. Enable a BVI to accept and route routable packets received from its correspondent bridge group.

• router(config)#bridge 1 route ip

5. Configure teh BVI interface

• router(config)#interface BVI 1

6. Assign an ip address on BVI interface

• router(config-if)#ip address <ip> <mask>
• router(config-if)#no shut

7. Enable the radio interface

• router(config)#interface dot11radio0
• router(config-if)#no shut
• router(config-if)#ssid <ssid>

8. Configure WPA encryption

• router(config-if-ssid)#encryption vlan 1 mode ciphers tkip

9. Bind SSID to a VLAN

• router(config-if-ssid)#vlan 1

10. Configure the SSID with open authentication

• router(config)#interface dot11radio0
• router(config-if)# ssid <ssid>
• router(config-if-ssid)#authentication open
• router(config-if-ssid)#authentication key-management wpa
• router(config-if-ssid)#wpa-psk ascii 0 <key>

11. Enable VLAN on the radio interface

• router(config)#interface dot11radio 0
• router(config-if)#encapsulation dot1q 0.1
• router(config-if)#bridge-group 1
• router(config)#encryption vlan 1 mode ciphers