cisco 877W config + Wifi

[CISCO877W]

bonjour a tous

j'ai un 877w avec une config Lan + wifi

Dhcp Lan en 192.168.0.X
Dhcp Wifi en 192.168.1.X

j'ai sur le reseau lan une imprimante ( donc en 0.X )

et bien a partir des postes wifi

1 ) impossible d'imprimer
2 ) quand je test le ping vers l'imp et bien cela ne marche pas

avez vous une idee

merci

A+

[gunm]

Bonjour,

pourrais tu poster ta conf, il y a peut être des ACLs ou autre joyeusetés!
_________________
Cordialement,

~~~ GunM ~~~

[CISCO877W]

salut

cote acc-l j'ai tous vire et j'ai tjrs le meme pb

si tu a une idee

donc config 877w (qui gere le multiple ssid) et un seul de configurer dans la config

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Wifi
!
boot-start-marker
boot-end-marker
!
logging buffered 4096
enable password cisco
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login userauthen local
aaa authorization console
aaa authorization exec default local
aaa authorization network default local
aaa authorization network groupauthor local
!
!
aaa session-id common
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 2:00
!
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key ciscote hostname xxxxxxxxxxxxxxxxxxxxxxx
!
crypto ipsec security-association lifetime seconds 86400
!
crypto ipsec transform-set DYN-TS esp-3des esp-md5-hmac
!
crypto map IPSEC 10 ipsec-isakmp
set peer xxxxxxx
set peer xxxxxxxxxxxxxxxx
set transform-set DYN-TS
match address 103
!
!
crypto pki trustpoint TP-self-signed-xxxxxxxxxxxxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-xxxxxxxxxx
revocation-check none
rsakeypair TP-self-signed-xxxxxxxxxxxxxx
!
!
dot11 mbssid
!
dot11 ssid monwifi
vlan 30
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode
wpa-psk ascii 0 w;u3xxxI;>xxxx
information-element ssidl wps
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.x.x
!
ip dhcp pool LAN
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.254
!
ip dhcp pool WIFI
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.254
!
!
ip cef
ip cef accounting per-prefix non-recursive prefix-length
ip cef load-sharing algorithm original
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall cuseeme
ip inspect name firewall h323
ip inspect name firewall rcmd
ip inspect name firewall realaudio
ip inspect name firewall streamworks
ip inspect name firewall vdolive
ip inspect name firewall sqlnet
ip inspect name firewall tftp
ip inspect name firewall ftp
ip inspect name firewall icmp
ip inspect name firewall sip
ip inspect name firewall esmtp max-data 52428800
ip inspect name firewall fragment maximum 256 timeout 1
ip inspect name firewall netshow
ip inspect name firewall rtsp
ip inspect name firewall pptp
ip inspect name firewall skinny
no ip bootp server

!
login block-for 10 attempts 10 within 10
login delay 10
login quiet-mode access-class 100
login on-failure log every 10
login on-success log every 15
!
!
!
file verify auto
username xxxx privilege 15 password 0 xxxx
username xxxxx privilege 15 password 0 xxxx
username xxxx privilege 15 password 0 xxxx
username xxxx password 0 xxxx
archive
log config
hidekeys
!
!
ip tcp selective-ack
ip tcp timestamp
!
bridge irb
!
!
interface Loopback1
ip address 10.11.12.13 255.255.255.255
ip nat inside
ip virtual-reassembly
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
!
interface FastEthernet0
description vers ip public
switchport access vlan 10
!
interface FastEthernet1
description direct switch
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 30 mode ciphers aes-ccm
!
ssid monwifi
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
description Cisco Open
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.30
encapsulation dot1Q 30
no cdp enable
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 spanning-disabled
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
!
interface Vlan1
description reseau LAN
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan10
description vers Reseau public
ip address dhcp
ip nat outside
ip virtual-reassembly
!
interface BVI30
ip address 192.168.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface BVI1
no ip address
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
!
no ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 133 interface Vlan10 overload

!
!
access-list 100 deny tcp any host 192.168.0.254 eq telnet
access-list 100 deny tcp any host 192.168.0.254 eq www log
access-list 100 deny tcp any host 192.168.0.254 eq 22 log
access-list 100 deny tcp any host 192.168.0.254 eq 443 log

access-list 133 permit ip any any
no cdp run

!
!
!
control-plane
!
bridge 30 route ip
!
line con 0
no modem enable
line aux 0
line vty 0 4
exec-timeout 15 0
privilege level 15
password xxxx
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 20000 1000
ntp clock-period 17175121
ntp server xxx.xxx.xxx.xxx

!
webvpn cef
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end