Cisco 871 router and WEP WPA-PSK



I am trying to configure a Cisco 871 integrated services router to use
both WEP and WPA-PSK. The issue I am having is that WPA-PSK is not
working. I am using a Linksys WPC54G pc card on a laptop. I've tried
configuring the laptop using the Linksys configuration program and XP
WZC and they both don't connect. Here is my config. Is there
something I am missing? VLAN is being used for internal clients
connecting to the internal network. VLAN 50 is being used for wifi
guests, i.e. consultants etc, that need internet access. Once I get
the two wVLANs running I will be using access lists to block access
from the guest vlan.

Thanks


Current configuration : 2348 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
!
username routeradmin <removed>
no aaa new-model
ip subnet-zero
ip cef
ip dhcp excluded-address 192.168.50.1 192.168.50.49
ip dhcp excluded-address 192.168.50.71 192.168.50.254
!
ip dhcp pool WiFiGuests
import all
network 192.168.50.0 255.255.255.0
default-router 192.168.50.1
!
!
ip domain name domain.com
no ftp-server write-enable
!
!
!
!
!
bridge irb
!
!
interface FastEthernet0
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
shutdown
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Dot11Radio0
no ip address
!
encryption mode ciphers tkip wep128
!
encryption vlan 50 key 1 size 128bit 0 21586656793557343746364B57
transmit-key
encryption vlan 50 mode wep mandatory
!
encryption vlan 1 mode ciphers tkip
!
ssid wifi-wpapsk
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 0 wpapskpassword
!
ssid wifi-wep
vlan 50
authentication open
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.50
encapsulation dot1Q 50
ip address 192.168.50.1 255.255.255.0
!
interface Vlan1
no ip address
bridge-group 1
!
interface BVI1
ip address 10.10.50.1 255.255.255.0
!
ip classless
!
no ip http server
ip http authentication local
ip http secure-server
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
privilege level 15
login local
no modem enable
transport preferred all
transport output all
line aux 0
transport preferred all
transport output all
line vty 0 4
privilege level 15
login local
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end

.



Relevant Pages

  • Re: Multiple DHCP Scopes associated with VLANs
    ... You can't configure the same VLAN with two different IP subnets. ... no ip route-cache ... bridge-group 1 block-unknown-source ... transport preferred all ...
    (comp.dcom.sys.cisco)
  • [NEWS] ARP Attacks Access Point Memory Exhaustion
    ... Get your security news from a reliable source. ... the command L2-FILTER BLOCK-ARP to each radio interface. ... interfaces in one VLAN and places wireless clients into different VLANs ... bridge-group 1 spanning-disabled ...
    (Securiteam)
  • Re: Problem config Cisco 877w
    ... > you could use some NAT statements. ... > the dialer interface when you do a show command? ... bridge-group 1 spanning-disabled ... transport preferred all ...
    (comp.dcom.sys.cisco)
  • Cisco 877w: Fa0-3 Interfaces up but no traffic passes
    ... Data Vlan101 only, no voice vlan required, WPA ... output errors, 0 collisions, 0 interface resets ... switchport trunk native vlan 101 ... bridge-group 101 subscriber-loop-control ...
    (comp.dcom.sys.cisco)
  • Re: Aironet 1300 range as an access point
    ... BG, I'm not sure how to obtain the configuration, however the CLI command ... bridge-group 1 spanning-disabled ... logging snmp-trap emergencies ... transport preferred all ...
    (comp.dcom.sys.cisco)