Tsu Electronica

C H A P T E R

9

Configuring a Wireless LAN Connection
The Cisco 850 and Cisco 870 series routers support a secure, affordable, and easy-to-use wireless LAN solution that combines mobility and flexibility with the enterprise-class features required by networking professionals. With a management system based on Cisco IOS software, the Cisco routers act as access points, and are Wi-Ficertified, IEEE 802.11a/b/g-compliant wireless LAN transceivers. You can configure and monitor the routers using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). This chapter describes how to configure the router using the CLI. Use the interface dot11radio global configuration CLI command to place the device into radio configurationmode. See the Cisco Access Router Wireless Configuration Guide for more detailed information about configuring these Cisco routers in a wireless LAN application. Figure 9-1 shows a wireless network deployment.
Figure 9-1 Wireless Connection to the Cisco Router

3 1

2 4
129282

1 2 3 4

Wireless LAN (with multiple networked devices) Cisco 850 or Cisco 870 series access router connected tothe Internet VLAN 1 VLAN 2

In the configuration example that follows, a remote user is accessing the Cisco 850 or Cisco 870 series access router using a wireless connection. Each remote user has his own VLAN.

Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01

9-1

Chapter 9 Configure the Root Radio Station

Configuring a Wireless LAN ConnectionConfiguration Tasks

Perform the following tasks to configure this network scenario:
• • •

Configure the Root Radio Station Configure Bridging on VLANs Configure Radio Station Subinterfaces

A configuration example showing the results of these configuration tasks is provided in the “Configuration Example” section on page 9-7.

Note

The procedures in this chapter assume that youhave already configured basic router features as well as PPPoE or PPPoA with NAT. If you have not performed these configurations tasks, see Chapter 1, “Basic Router Configuration,” Chapter 3, “Configuring PPP over Ethernet with NAT,” and Chapter 4, “Configuring PPP over ATM with NAT,” as appropriate for your router. You may have also configured DHCP, VLANs, and secure tunnels.

Configure the RootRadio Station
Perform these steps to create and configure the root radio station for your wireless LAN, beginning in global configuration mode: Command
Step 1

Purpose Enters interface configuration mode for the radio interface.

interface name number
Example:
Router(config)# interface dot11radio 0 Router(config-if)#

Step 2

broadcast-key [vlan vlan-id] change seconds
Example:Router(config-if)# broadcast-key vlan 1 change 45 Router(config-if)#

Specifies the time interval, in seconds, between rotations of the broadcast encryption key used for clients.
Note

Client devices using static Wired Equivalent Privacy (WEP) cannot use the access point when you enable broadcast key rotation—only wireless client devices using 802.1x authentication (such as Light ExtensibleAuthentication Protocol [LEAP], Extensible Authentication Protocol–Transport Layer Security [EAP-TLS], or Protected Extensible Authentication Protocol [PEAP]) can use the access point. This command is not supported on bridges.

Note

See the Cisco IOS Commands for Access Points and Bridges for more details.

Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide

9-2OL-5332-01

Chapter 9

Configuring a Wireless LAN Connection Configure the Root Radio Station

Command
Step 3

Purpose Specifies the encryption method, algorithm, and key used to access the wireless interface. The example uses the VLAN with optional encryption method of data ciphers.

encryption method algorithm key
Example:
Router(config-if)# encryption vlan 1 mode ciphers tkip...