A couple of problems with my 881W...

Hello masters of wireless,
I have a couple of interesting problems. Can anyone help?
1. I recently setup a Cisco 881W to use dual SSID's. My radio signal broadcasts fine for both, but I am having an issue with the BVI interface not staying up:
2. Output from wireless connection testing. I can't figure out why my first SSID isn't giving out an IP address anymore...
Here are the configurations of both the router, and the internal access points:
Router:
The Internal Wireless AP:
I have a couple of interesting problems. Can anyone help?
1. I recently setup a Cisco 881W to use dual SSID's. My radio signal broadcasts fine for both, but I am having an issue with the BVI interface not staying up:
881W-AP#show ip interface brief Interface IP-Address OK? Method Status Protocol [COLOR=#ff0000][B]BVI1 10.10.10.3 YES manual down down[/B][/COLOR] Dot11Radio0 unassigned YES NVRAM up up Dot11Radio0.11 unassigned YES unset up up Dot11Radio0.12 unassigned YES unset up up GigabitEthernet0 unassigned YES NVRAM up up GigabitEthernet0.11 unassigned YES unset up up GigabitEthernet0.12 unassigned YES unset up up
2. Output from wireless connection testing. I can't figure out why my first SSID isn't giving out an IP address anymore...
881W-AP# Apr 21 02:25:57.182: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0014.ab15.1abc2 Reason: Sending station has left the BSS 881W-AP# Apr 21 02:26:14.778: %DOT11-6-ASSOC: Interface Dot11Radio0, Station WIN7 0014.ab15.1abc2 Associated KEY_MGMT[WPAv2 PSK] 881W-AP# Apr 21 02:26:27.246: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 54321.caba.d00d Associated KEY_MGMT[WPAv2 PSK] 881W-AP#show dot11 associations 802.11 Client Stations on Dot11Radio0: SSID [CatchVirusHere] : MAC Address IP address Device Name Parent State 0014.ab15.1abc2 [B][COLOR=#ff0000]0.0.0.0[/COLOR][/B] ccx-client WIN7 self Assoc SSID [WantVirus] : MAC Address IP address Device Name Parent State 54321.caba.d00d 192.168.1.201 unknown - self Assoc 881W-AP#show dot11 associations 802.11 Client Stations on Dot11Radio0: SSID [CatchVirusHere] : MAC Address IP address Device Name Parent State 0014.ab15.1abc2 [COLOR=#ff0000][B]169.254.240.3[/B][/COLOR] ccx-client WIN7 self Assoc SSID [WantVirus] : MAC Address IP address Device Name Parent State 54321.caba.d00d 192.168.1.201 unknown - self Assoc 881W-AP#
Here are the configurations of both the router, and the internal access points:
Router:
881W-R1#show running-config Building configuration... Current configuration : 4111 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname 881W-R1 ! boot-start-marker boot-end-marker ! logging message-counter syslog enable secret 5 someencryptedpassword ! no aaa new-model service-module wlan-ap 0 bootimage autonomous ! ip source-route ! ! ip dhcp excluded-address 10.10.10.1 10.10.10.99 ip dhcp excluded-address 10.10.10.200 10.10.10.254 ip dhcp excluded-address 192.168.1.1 192.168.1.200 ! ip dhcp pool myDHCPpool import all network 10.10.10.0 255.255.255.0 default-router 10.10.10.1 dns-server 10.10.10.1 255.255.255.0 ! ip dhcp pool GuestPool network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 dns-server 192.168.1.1 255.255.255.0 ! ! ip cef ip domain name somedomain.net ip name-server 68.94.156.1 ip name-server 68.94.157.1 ! no ipv6 cef ! multilink bundle-name authenticated ! ! username someuser privilege 15 secret 5 someencryptedpassword ! ! ! archive log config hidekeys ! ! ip ssh version 2 ! ! ! interface FastEthernet0 switchport access vlan 11 ! interface FastEthernet1 switchport access vlan 11 ! interface FastEthernet2 switchport access vlan 12 ! interface FastEthernet3 switchport access vlan 12 ! interface FastEthernet4 description ISP Connection ip address dhcp no ip redirects no ip proxy-arp ip nat outside ip virtual-reassembly duplex auto speed auto no cdp enable ! interface wlan-ap0 description Service module to manage the enbedded AP ip unnumbered Vlan11 arp timeout 0 ! interface Wlan-GigabitEthernet0 description Internal switch interface connecting to the embedded AP switchport mode trunk ! interface Vlan1 no ip address ! interface Vlan11 ip address 10.10.10.1 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! interface Vlan12 description Guest Vlan ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 75.30.252.1 no ip http server no ip http secure-server ! ! ip nat inside source list 11 interface FastEthernet4 overload ! access-list 11 permit 10.10.10.0 0.0.0.255 ! ! ! ! ! control-plane ! ! line con 0 password 7 someencryptedpassword logging synchronous login no modem enable line aux 0 line 2 no activation-character no exec transport preferred none transport input all line vty 0 4 password 7 someencryptedpassword login transport input ssh ! scheduler max-task-time 5000 end
The Internal Wireless AP:
881W-AP#show run Building configuration... Current configuration : 4176 bytes ! ! Last configuration change at 20:23:44 UTC Thu Apr 20 1905 by someuser ! NVRAM config last updated at 20:27:33 UTC Thu Apr 20 1905 by someuser ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname 881W-AP ! enable secret 5 someencryptedpassword ! no aaa new-model ! ! dot11 vlan-name vlan11 vlan 11 dot11 vlan-name vlan12 vlan 12 ! dot11 ssid CatchVirusHere vlan 11 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 someencryptedpassword ! dot11 ssid WantVirus vlan 12 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 someencryptedpassword ! ! ! username someuser privilege 15 secret 5 someencryptedpassword ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 11 mode ciphers aes-ccm ! encryption vlan 12 mode ciphers aes-ccm ! ssid CatchVirusHere ! ssid WantVirus ! mbssid speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m1. m2. m3. m4. m8. m9. m10. m11. m12. m13. m14. m15. channel 2462 station-role root ! interface Dot11Radio0.11 encapsulation dot1Q 11 native no ip route-cache bridge-group 11 bridge-group 11 subscriber-loop-control bridge-group 11 block-unknown-source no bridge-group 11 source-learning no bridge-group 11 unicast-flooding bridge-group 11 spanning-disabled ! interface Dot11Radio0.12 encapsulation dot1Q 12 no ip route-cache bridge-group 12 bridge-group 12 block-unknown-source no bridge-group 12 source-learning no bridge-group 12 unicast-flooding bridge-group 12 spanning-disabled ! interface GigabitEthernet0 description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router no ip address no ip route-cache ! interface GigabitEthernet0.11 encapsulation dot1Q 11 native no ip route-cache bridge-group 11 no bridge-group 11 source-learning bridge-group 11 spanning-disabled ! interface GigabitEthernet0.12 encapsulation dot1Q 12 no ip route-cache bridge-group 12 no bridge-group 12 source-learning bridge-group 12 spanning-disabled ! interface BVI1 ip address 10.10.10.3 255.255.255.0 no ip route-cache ! ip default-gateway 10.10.10.1 no ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag bridge 1 protocol ieee bridge 1 route ip ! ! ! line con 0 privilege level 15 password 7 someencryptedpassword logging synchronous login local no activation-character line vty 0 4 password 7 someencryptedpassword logging synchronous login local ! end
My WGU B.S. IT - Security Progress : Transferred In|Remaining|In Progress|Completed
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
Comments
VLAN and interface stats from the host router side of the 881W
VLAN and interface stats from the AP side of the 881W
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
When I tried to associate to the SSID linked to VLAN 11 (10.10.10.0 network), nothing happened, and it just sat and spun. On the AP side, it shows that the association was made, but no IP address was assigned. Does anyone have any ideas why this may be?
Just for grins, here is my "show ip route" from the host router side of the 881W:
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
The link below is where I went to make sense of the inner workings of the 881W:
Dissecting The Cisco 881w ISR – Astorino Networks
My configuration is based off of the following link:
Cisco 880W (881W, 886W, 887W, 888W) Multiple - Dual SSID Integrated Access Point Configuration
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!
AGC1, CLC1, GAC1, INC1, CTV1, INT1, BVC1, TBP1, TCP1, QLT1, HHT1, QBT1, BBC1 (39 CUs), (0 CUs) (0 CUs)
WFV1, BNC1, EAV1, EBV1, COV1 | MGC1, IWC1 | CQV1, CNV1, IWT1, RIT1 | DRV1, DSV1, TPV1, CVV1 | EUP1, EUC1, DHV1| CUV1, C173 | BOV1, CJV1, TXP1, TXC1 | TYP1, TYC1, SBT1, RGT1 (84 CUs) DONE!