Recently needed to use 3 Cisco AP’s (702) and convert them to Autonomous mode and Run 2 x WAP’s with a Cable and Wireless Bridge the 3rd AP.

All WAP’s needed to accept Client connections as I didn’t want or need to dedicate an AP to act as a bridge only.

Fairly simple configuration and I made use of Both Radios 2.4Ghz and 5Ghz. You can assign the Infrastructure SSID and Client SSID to either the 2.4GHz or 5GHz but I decided I wanted to make use of Both.

I will assume you know how to configure the basics of a Cisco WAP.

Quick Straight Forward SSID Configuration which is used for the Clients to Connect To:

dot11 ssid ClientWifi
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii 0 P@ssw0rd123

Assign the SSID to the Dot11 0 Radio (2.4GHz)

interface Dot11Radio0
no ip address
!
encryption mode ciphers aes-ccm tkip
!
ssid ClientWifi
!
antenna gain 0
packet retries 64 drop-packet
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding

Make Sure Interfaces are not shutdown and status is Up/Up (show ip interface brief)

Now Create the Infrastructure SSID (this needs to be done on both the Root Bridge and Non Root Bridge WAP)

dot11 ssid Bridge
authentication open
authentication key-management wpa
infrastructure-ssid
wpa-psk ascii 0 C0nnectBr1dg3

Assign ssid Bridge to Interface Dot11 1 (5GHz Radio)

interface Dot11Radio1
no ip address
!
encryption mode ciphers aes-ccm tkip
!
ssid bridging
!
antenna gain 0
peakdetect
no dfs band block
packet retries 64 drop-packet
channel dfs
station-role root bridge wireless-clients
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled

Note: The hard cabled Access Point (WAP2) in this case is the Station Root Bridge. WAP3 the wireless bridged device will be set to:

station-role non-root bridge wireless-clients

Non-Root Bridge Connects to Root Bridge.

If you use “show dot11 associations” or “show dot11 associations all-client

You will be able to see if the Bridging has worked because you will see under SSID [Bridge] the MAC of WAP3 with its IP address and Device set to Bridge and the word “Assoc” under State

When running the “show dot11 associations” you will see devices associated to both WAP2 and WAP3 but it does specify with WAP the client is connected to.

Leave a Reply

Your email address will not be published. Required fields are marked *