Skip to main content

Example, Add Cisco AP to a netwrork.

I always set a scheduled reload of the remote device just-in-case there's a chance of breaking it (I'm still learning). 10 mins should give you enough time to implement your changes, test it and save it. Depending on the site and how many admins touch the device you could in theory leave your changes unsaved for a few days just to be sure, then get an onsite person to power cycle it if problems occur.


reload in 10
config t
# config the ssid and map it to a vlan, 1 per vlan.
dot11 ssid YOUR_SSID
vlan YOUR_VLAN
authentication open 
authentication key-management wpa
wpa-psk ascii 0 YOUR_PASSWORD
 
# assign encryption to ssid
interface Dot11Radio0
encryption vlan YOUR_VLAN mode ciphers aes-ccm
ssid YOUR_SSID
 
# config the sub interfaces for dot11 radio and ethernet
interface Dot11Radio0.YOUR_VLAN
 encapsulation dot1Q YOUR_VLAN
 no ip route-cache
 bridge-group YOUR_VLAN
 bridge-group YOUR_VLAN subscriber-loop-control
 bridge-group YOUR_VLAN block-unknown-source
 no bridge-group YOUR_VLAN source-learning
 no bridge-group YOUR_VLAN unicast-flooding
 bridge-group YOUR_VLAN spanning-disabled
 
interface FastEthernet0.YOUR_VLAN
 encapsulation dot1Q YOUR_VLAN
 no ip route-cache
 bridge-group YOUR_VLAN
 no bridge-group YOUR_VLAN source-learning
 bridge-group YOUR_VLAN spanning-disabled
 
# happy?
reload cancel
 
# not happy?
wait 10 mins
 
# want to undo some stuff manually? use the "no" form.
interface Dot11Radio0.YOUR_VLAN
interface FastEthernet0.YOUR_VLAN
 
# or
no bridge-group YOUR_VLAN subscriber-loop-control
 

There's great article here that talks about bridge groups and bvi.

Labels:

Popular posts from this blog

Mac OS X "SOE" Day 7

Page Redirection > continued from day 6... In summary, here is my method for creating a Mac OS X 10.7.3 Standard Operating Environment "SOE" Image. Overview The goal is to create a "MASTER" non-booted SOE that can be used with multiple models and it multiple sites with different local requirements. My intention is to use this "MASTER" image in a manual restore procedure due to the fact netboot facilities cannot be made available to all the sites I support however the DMG files are netboot compatible. Requirements Lion Recovery Disk Assistant v1.0 "TARGET" workstation. A compatible workstation that will be used to install Mac OS X 10.7.3 and capture a DMG image(s). "ADMIN" workstation. A workstation with Disk Utility that you will use to capture your DMG image(s). External storage such as a USB HARD DISK. Setup Downloaded the Lion Recovery Disk Assi...
more...

Mac OS X "SOE" Day 3

Page Redirection > continued from day 2... Ready to copy my scripts over, as previously mentioned I am thinking of having 3 phases; build - preps the image for dmg capture. firstboot - runs anything I can't do in build ie, writing to byhost files etc that require UUID or Macaddress. Basically machine/model specific settings. localise - runs localisation scripts such as language, locale etc etc. Basically a set of dynamic scripts in case you are an admin for multiple offices, multiple countries. So what's the minimum we need in the "build" phase? Disable the Setup Wizard. Disable the Registration Wizard. Create a local admin user(s) and set autologin for the firstboot phase. Enable root (set the password). Enable SSH Access Enable VNC Access Enable ARD Access Disable softwareupdate automatic updates "schedule" Cleanup/Minimise the dmg where possible. Set a firstboot loginhook for the second phase. What are some other n...
more...

Mac OS X "SOE" Day 5

Page Redirection > continued from day 4... Continuing on from the "build" phase setup we need to script our "firstboot" options. The last step in the build phase set our "firstboot" script as  "/var/root/firstboot.sh". So what's the minimum we need in the "firstboot" phase? There isn't really a minimum for this phase as you can do most of this stuff at localisation phase. The main things I do here relate to writing prefs that a machine specific ie, contain UUID or MACADDRESS Setting default screensaver Setting default menu extras Run Apple Software updates that require a booted OS Set the initial HOSTNAME, LOCALHOSTNAME and COMPUTERNAME Set the initial Energy Saver settings Disable some Network Services (firewire, bluetooth) Set the initial Network Services Order Disable IPv6 Couple things you will need to know for this stage, how to get the UUID and/or the MACADDRESS. Post 2010 macs seem to use t...
more...