Jun 21 08:30:28.447: %CDP_PD-2-POWER_LOW: All radios disabled – NEGOTIATED WS-C3

750E-48PD (8843.e17f.f60d)

Jun 21 08:31:28.451: %CDP_PD-2-POWER_LOW: All radios disabled – NEGOTIATED WS-C3

750E-48PD (8843.e17f.f60d)

After some research I figured out Cisco 3750 E Switch is capable of enhance POE , which can provide POE power of 20 Watts compared to standard 15.4 Watts per port, I updated the IOS for one my Cisco Catalyst 3750 E Switch from 12.2(35)SE5 to 12.2(53)SE2

 Once the IOS update was done I used the following command on the particular port to provide 20 watts of power

ITKE-AS01(config-if)# power inline port max 20000

Then AP Started working normally and all the wireless radios were up and running as demonstrated below.

After posting my article I did a little search on Cisco.com and I found the following white paper

“Cisco Enhanced PoE

To support new and emerging technology, many of Cisco’s customers have an immediate requirement for PoE in excess of 15.4W per port. For example, Cisco has introduced a new wireless access point compliant with the IEEE 802.11n draft 2.0 standards. This wireless access point, the Cisco Aironet® 1250 Series Access Point, supports two radios, which use MIMO and other new technologies to increase the throughput, reliability, and predictability of the wireless network. However, to function at full capability, the Cisco Aironet 1250 requires 18.5W of PoE.

Powering the Cisco Aironet 1250, with its 18.5W power requirement, from a switch that supports only the IEEE 802.3af standard decreases network efficiency, because network managers must either add more equipment and cable to provide the additional power needed or resort to utilizing only one radio in the Cisco Aironet 1250. Although the Cisco Aironet 1250 could easily receive full power from an IEEE 802.3at-compliant PSE, that standard has not yet been ratified.

That is why Cisco developed Cisco Enhanced PoE, Cisco’s extension to the IEEE 802.3af standard that delivers as much as 20W per port of inline power for devices that support Cisco Discovery Protocol (CDP). Cisco Enhanced PoE is offered on Catalyst 3750-E and Catalyst 3560-E switches starting in February 2008 with Cisco IOS® Software Release 12.2(44)SE. The Catalyst 6500 Series10/100/100 PoE linecards support Enhanced PoE with 12.2(33)SXH2 or later and the Catalyst 4500 E-Series support Enhanced PoE with 12.2(44)SG or later. When, for example the Cisco Aironet 1250 is connected to a Catalyst switch supporting Cisco Enhanced PoE, the access point can use Cisco Discovery Protocol to request a power level from the switch that is higher than the 15.4 Watts described in the IEEE 802.3af standard. After the Catalyst switch receives the Cisco Discovery Protocol message for higher power, it will grant the increased wattage to the Cisco Aironet 1250.

Cisco Enhanced PoE is by no means a replacement for or in competition with the IEEE 802.3at (PoE+) standard. It is simply a means of delivering PoE in excess of 15.4W per port to those customers who must immediately implement technologies requiring it and cannot wait for the 802.3at standard to be finalized.”

To read the complete white paper click this link. Also I am thankful to all those gentlemen who posted their comments and tried to provide a solution. The current IOS version of the Cisco Catalyst 3750 E Catalyst Switch I have  is 12.2(35)SE5, let me upgrade the IOS and see whether I can enjoy the enhance power capabilities of 3750 E Switch.

Jun 21 08:30:28.447: %CDP_PD-2-POWER_LOW: All radios disabled – NEGOTIATED WS-C3

750E-48PD (8843.e17f.f60d)

Jun 21 08:31:28.451: %CDP_PD-2-POWER_LOW: All radios disabled – NEGOTIATED WS-C3

750E-48PD (8843.e17f.f60d)

And when we checked the Cisco 1252 Aironet Access Point from the Internet Explorer we got this message.

Looking at the logs and graphical view I figured out the Cisco 1252 Aironet Access Point shut downed its radio interface as it was not getting the sufficient power.

Normally the Cisco 1252 Aironet Access Point requires more than 16 watts of power, whereas the Cisco 3750 E Switch is capable of providing maximum of 15.4 watts.

I am trying to find out a way to resolve these issues. The moment I get any resolution I will update you all folks.

Cisco Systems launched recently a Wireless access point targeting the Small to Midsize business. The Cisco AP 500 Access Point is easy to install and manage.  The clustering technology with simplifies the deployment and of Cisco AP 500 AP by creating single point of administration for multiple Cisco AP 500 Access Points. Currently Cisco is offering one model AP 541.

The Cisco AP 500 comes with clustering technology, Gigabit Ethernet LAN interface for higher throughput, 802.11n compliance and dual band user selection for either 2.4 GHz or 5 GHz and more over it supports voice roaming.

Some of the features of Cisco AP 500 are as follows

Cisco AP 500 Series Wireless Access Points offer a range of features:

• Clustering Technology: Simplifies wireless deployments by creating a single point of administration for multiple access points. Clustering technology replicates a configuration, pushes it out to other access points, and continuously manages the frequency channels for each device, reducing network interface.
• Superior Performance: Gigabit Ethernet LAN interface for higher throughput. Wireless radio complies with 802.11n wireless technology, using MIMO technology to enhance network coverage, capacity, and throughput for data and multimedia applications, while allowing for backward compatibility with a, b, and g clients.
• Robust Security: Supports business-class security encryptions (WPA2, 802.1x supplicant) and authentication for client compatibility, MAC address authentication, client isolation, and rogue access point detection.
• Voice Roaming: Allowing for client fast roaming while maintaining good voice quality with 802.11i pre-authenticated standards.
• Power Options: Uses both standard AC power and Power-over-Ethernet (PoE), simplifying installations in locations such as drop ceilings where power outlets may not be accessible.

[kml_flashembed movie="http://www.youtube.com/v/muvJBupjyrc" width="425" height="350" wmode="transparent" /]

In this post I will just post the snap shots for SSIDS ADMIN and GUEST, where you can see the SSIDS are connected, they got an IP address and they can ping the default gateway as well. It’s just to confirm  connectivity.

ADMIN SSID Connectivity

The PC is getting an IP from the DHCP Server for the SSID ADMIN  and VLAN 101

The PC can ping the default gateway

GUEST SSID Connectivity

The PC is getting an IP from the DHCP Server for the SSID GUEST and VLAN 102

 The PC can ping the default gateway

So with this I will conclude this series. If any body have any comments please do comment.

Dear all lets proceed further with the configuration of the Cisco Catalyst 3560 Switch

Configure the Cisco Catalyst 3560 Switch.

In this step we will configure the Cisco Catalyst 3560 Switch port which is connected to the Cisco Aironet 1250 Series Access Point to the wired network. We will configure the Cisco Catalyst 3560 Switch port, which is connected to the Cisco Aironet 1250 Series Access Point as trunk port because this port will carries traffic for all the VLANs on the wired network. In our case the VLANs are VLAN 101, 102 and the native VLAN 100.

When you configure the Cisco Catalyst 3560, which connects to the Cisco Aironet 1250 Series Access Point ,ensure that the native VLANs that you configure match the native VLAN on the Cisco Aironet 1250 Series Access Point. Otherwise, frames are dropped. In order to configure the trunk port on the Cisco Catalyst 3560 Switch, use the following commands from the CLI on the Cisco Catalyst 3560 switch:

Note: In our scenario the Cisco Aironet 1250 Series Access Point is connected to a Cisco Catalyst 3560 Switch to the port number Giga Ethernet 0/20

ITKE-Cisco(config)#interface interface gigabitEthernet 0/20

ITKE-Cisco(config-if)# switchport mode trunk

ITKE-Cisco(config-if)#switchport trunk encapsulation dot1q

ITKE-Cisco(config-if)#switchport trunk native vlan 100

ITKE-Cisco(config-if)#switchport trunk allowed vlan 101,102

ITKE-Cisco(config-if)#switchport nonegotiate

ITKE-Cisco(config-if)#

(The above commands configures the Giga Ethernet port 0/20  as trunk port, with a dot1q encapsulation , with VLAN 100 as a native trunk VLAN ).

Note: Cisco IOS Software-based Aironet wireless equipment does not support Dynamic Trunking Protocol (DTP). Therefore, the Cisco Catalyst 3560 must not try to negotiate DTP.

With this configuration we have successfully completed the configuration of multiple SSIDs in the Cisco Aironet 1250 Series Access Point . In the coming post I will post the snap shots for the connection established to SSIDS ADMIN and GUEST. Basically we will test the connectivity with the ping command.

In the previous post we looked at configuration of the VLANs and SSIDS in a Cisco Aironet 1250 Series Access Point.  The final configuration in the Cisco Aironet 1250 Series Access Point should be as follows, I am just posting the complete running configuration from the Cisco Aironet 1250 Series Access Point

ITKE-AP-01# show running-config

Building configuration…

Current configuration : 2693 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname ITKE-AP-01

!

enable secret 5 $1$d1hx$IvRMqYGHs0JXjIgy8/.Ms0

!

no aaa new-model

!

!

!

dot11 ssid ADMIN

   vlan 101

   authentication open

!

dot11 ssid GUEST

   vlan 102

   authentication open

   guest-mode

   mbssid guest-mode

!

power inline negotiation prestandard source

!

!

username Cisco password 7 00271A150754

!

bridge irb

!

!

interface Dot11Radio0

 no ip address

 no ip route-cache

 !

 ssid ADMIN

 !

 ssid GUEST

 !

 mbssid

 station-role root

!

interface Dot11Radio0.100

 no ip route-cache

!

interface Dot11Radio0.101

 encapsulation dot1Q 101

 no ip route-cache

 bridge-group 101

 bridge-group 101 subscriber-loop-control

 bridge-group 101 block-unknown-source

 no bridge-group 101 source-learning

 no bridge-group 101 unicast-flooding

 bridge-group 101 spanning-disabled

!

interface Dot11Radio0.102

 encapsulation dot1Q 102

 no ip route-cache

 bridge-group 102

 bridge-group 102 subscriber-loop-control

 bridge-group 102 block-unknown-source

 no bridge-group 102 source-learning

 no bridge-group 102 unicast-flooding

 bridge-group 102 spanning-disabled

!

interface Dot11Radio0.100

 encapsulation dot1Q 100 native

 no ip route-cache

 bridge-group 1

 bridge-group 1 subscriber-loop-control

 bridge-group 1 block-unknown-source

 no bridge-group 1 source-learning

 no bridge-group 1 unicast-flooding

 bridge-group 1 spanning-disabled

!

interface Dot11Radio1

 no ip address

 no ip route-cache

 !

 ssid ADMIN

 !

 dfs band 3 block

 channel dfs

 station-role root

 bridge-group 1

 bridge-group 1 subscriber-loop-control

 bridge-group 1 block-unknown-source

 no bridge-group 1 source-learning

 no bridge-group 1 unicast-flooding

 bridge-group 1 spanning-disabled

!

interface GigabitEthernet0

 no ip address

 no ip route-cache

 duplex auto

 speed auto

!

interface GigabitEthernet0.101

 encapsulation dot1Q 101

 no ip route-cache

 bridge-group 101

 no bridge-group 101 source-learning

 bridge-group 101 spanning-disabled

!

interface GigabitEthernet0.102

 encapsulation dot1Q 102

 no ip route-cache

 bridge-group 102

 no bridge-group 102 source-learning

 bridge-group 102 spanning-disabled

!

interface GigabitEthernet0.100

 encapsulation dot1Q 100 native

 no ip route-cache

 bridge-group 1

 no bridge-group 1 source-learning

 bridge-group 1 spanning-disabled

!

interface BVI1

 ip address 10.0.0.99 255.255.254.0

 no ip route-cache

!

ip default-gateway 10.0.0.1

ip http server

no ip http secure-server

bridge 1 route ip

!

!

!

line con 0

line vty 0 4

 login local

!

end

ITKE-AP-01#

In my next post as promised I will post the configuraton for the Cisco Catalyst 3560 Switch.

In today’s entry we will focus on configuration of VLANs and SSIDs in a Cisco Aironet 1250 Series Access Point. The procedure is as follows.

Configure

In this section, you will see the configuration steps required to complete the above mentioned scenario.

1^st Step: Configure the Native VLAN on the Cisco Aironet 1250 Series Access Point

The Native VLAN is a VLAN to which the Cisco Aironet 1250 Series Access Point and the Cisco Catalyst 3560 Switch are connected. Native VLAN of the Cisco Aironet 1250 Series Access Point is usually different from the other VLANS configured in the Cisco Aironet 1250 Series Access Point (In our case VLAN 101 and VLAN 102). The IP address used for the management of the Cisco Aironet 1250 Series Access Point is assigned to its BVI Interface and the IP address assigned is in the native VLAN. (In our case VLAN 100). . The traffic, for example, management traffic, sent to and by the Point itself assumes the native VLAN (VLAN 100), and it is untagged. All untagged traffic that is received on an IEEE 802.1Q (dot1q) trunk port is forwarded with the native VLAN (VLAN 100) that is configured for the port. If a packet has a VLAN ID that is the same as the native VLAN ID of the sending port, the Cisco Catalyst 3560 Switch sends the packet without a tag. Otherwise, the switch sends the packet with a tag.

In order to configure a native VLAN on a Cisco Aironet 1250 Series Access Point, issue the following commands in the global configuration mode on the Cisco Aironet 1250 Series Access Point

ITKE-AP-01(config)#interface gigabitEthernet 0.100

ITKE-AP-01(config-subif)# encapsulation dot1Q 100 native

ITKE-AP-01(config-subif)#exit

(The above commands will configure the encapsulation as dot1q and assign VLAN 100 as the native VLAN on the Giga Ethernet interface.)

ITKE-AP-01(config)#interface dot11radio 0.100

ITKE-AP-01(config-subif)# encapsulation dot1Q 100 native

ITKE-AP-01(config-subif)#exit

(The above commands will configure the encapsulation as dot1q and assign VLAN 100 as the native VLAN on the radio interface.)

2^nd Step: Configure the SSIDs on the Cisco Aironet 1250 Series Access Point

In this step we will configure two VLANs (VLAN 101 & VLAN 102) one for the ITKE administration department and other for the guest users only with an internet access.  The SSIDs are also need to be associated with specific VLANS as shown below.

·         VLAN 101 for the ITKE administration department and uses the SSID ADMIN.

·         VLAN 102 for the guest users and uses the SSID GUEST.

In order to configure a VLAN101 and 102 on a Cisco Aironet 1250 Series Access Point, issue the following commands in the global configuration mode on the Cisco Aironet 1250 Series Access Point

ITKE-AP-01(config)#dot11 ssid ADMIN

ITKE-AP-01(config-ssid)#authentication open

ITKE-AP-01(config-ssid)#vlan 101

 (The above commands will create an ssid ADMIN, assigned to VLAN 101 and with an open authentication.)

ITKE-AP-01(config)#dot11 ssid GUEST

ITKE-AP-01(config-ssid)#authentication open

ITKE-AP-01(config-ssid)#vlan 102

(The above commands will create an ssid GUEST, assigned to VLAN 102 and with an open authentication).

ITKE-AP-01(config)#interface gigabitEthernet 0.101

ITKE-AP-01(config-subif)#encapsulation dot1Q 101

ITKE-AP-01(config-subif)#bridge-group 101

ITKE-AP-01(config-subif)#exit

ITKE-AP-01(config)#

(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the giga Ethernet).

ITKE-AP-01(config)#interface dot11Radio 0.101

ITKE-AP-01(config-subif)#encapsulation dot1Q 101

ITKE-AP-01(config-subif)#bridge-group 101

ITKE-AP-01(config-subif)#exit

ITKE-AP-01(config)#

(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the sub interface on the radio interface).

ITKE-AP-01(config)#interface gigabitEthernet 0.102

ITKE-AP-01(config-subif)#encapsulation dot1Q 102

ITKE-AP-01(config-subif)#bridge-group 102

ITKE-AP-01(config-subif)#exit

ITKE-AP-01(config)#

(The above commands will set the encapsulation dot1q for VLAN 102 and assigns the sub interface to bridge group 102 to the giga Ethernet).

ITKE-AP-01(config)#interface dot11Radio 0.102

ITKE-AP-01(config-subif)#encapsulation dot1Q 102

ITKE-AP-01(config-subif)#bridge-group 102

ITKE-AP-01(config-subif)#exit

ITKE-AP-01(config)#

(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the sub interface on the radio interface).

3^rd Step: Assign the multiple SSIDs to the radio interface on the Cisco Aironet 1250 Series Access Point

ITKE-AP-01(config)#interface dot11Radio 0

ITKE-AP-01(config-if)#ssid ADMIN

ITKE-AP-01(config-if)#ssid GUEST

ITKE-AP-01(config-if)#mbssid

(The above commands assigns the multiple SSIDs ADMIN and GUEST  to the radio interface dot11radio 0 ).

Note: The SSIDs ADMIN and GUEST are configured for open authentication, For information on how to configure different authentication types on the Cisco Aironet 1250 Series Access Point , refer the Cisco document “Configuring Authentication Types”.

In next post we will look at the configuration for the Cisco 3560 Switch .

In order to configure multiple SSIDs in a Cisco Aironet 1250 Series Access Point, we will follow the following scenario,

The Scenario is based on following hardware and software versions.

Cisco Aironet 1250 Series Access Point runs with an IOS Version 12.4(10b) JDA3.

Cisco Catalyst 3560 Switch runs with an IOS version 12.2(44) SE1.

Cisco Catalyst 6500 Series Switch runs with an IOS version 12.2(18) SXF14.

The Cisco Aironet 1250 Series Access Point has three VLANs, – VLAN 100, VLAN 101 and VLAN 102. VLAN 100 will be the native VLAN, VLAN 101 for the ITKE admin department and VLAN 102 for the guest users. The Wireless users who belong to ITKE admin department must connect to the Cisco Aironet 1250 Series Access Point and should be able to connect the ITKE admin department users on the wired network which is VLAN 101.

The wireless guest users should be able to connect to the Internet Gateway or web server which is on the wired segment of VLAN 102.

A Cisco Catalyst 3560 Switch is connected to the Cisco Aironet 1250 Series Access Point at the access layer and the Cisco Catalyst 3560 Switch is also connected to the Cisco Catalyst 6500 Switch at the Core/Distribution layer). All VLANs are created in the Cisco Catalyst 6500 Switch which is beyond the scope of this document. (If any one feels he or she needs the sample configuration for the VLANs in the Cisco Catalyst 6500 switch it can be provided in the comments section of this blog entry).

A windows 2003 Server is used as a DHCP server which provides the IP address for both the VLANs VLAN 101 and VLAN 102. A DHCP scope has to be configured for both VLANS in the windows 2003 Server which is also beyond the scope of this document. But I am just adding the snap shot from the DHCP Server.

The following IP Address Scheme is applied for the VLANs

VLAN 100– 10.0.0.0 /23 (NATIVE VLAN)

VLAN 101 – 10.2.0.0/23

VLAN 102– 10.4.0.0/23

Following are the IP address used for the devices in this document.

·         The Cisco Aironet 1250 Series Access Point Bridge-Group Virtual Interface (BVI) IP Address (VLAN 100) 10.0.0.99.

·         Windows 2003 DHCP Server with an IP address 10.0.1.100 with VLAN scopes configured

·         Web Server with an IP Address 10.4.0.100.

·         Wireless Clients (SSID ITKE) gets connected to VLAN 101 gets an IP address from the Windows 2003 DHCP Server from the subnet 10.2.0.0.

·         Wireless Clients (SSID Guest) gets connected to VLAN 102 gets an IP Address from the Windows 2003 DHCP Server from the subnet 10.4.0.0.

In my next post I will post the configuration steps required to carry out the above motioned task. Until then do leave your comments for any future improvements or suggestions.

Recently we purchased plenty of Cisco Aironet 1250 Series Access Points, unfortunately we don’t have any Wireless LAN controllers to manage the Cisco Aironet 1250 Series Access Points.  Previously we were using HP Procurve 503 and 420 access points with multiple SSIDs with different VLANS, which was quite simple and easy to manage.

Whereas with the Cisco Aironet 1250 Series Access Points, configuring multiple SSIDs was an uphill task. As there was no proper documentation or configuration scenarios available particularly for Cisco Aironet 1250 Series Access Points in the Cisco Web Site.   I did some research and  tried few things and finally managed to configure the Cisco Aironet 1250 Series Access Points, with multiple SSIDs. In my next post I will come up the scenario and sample configuration which can be used to create multiple SSIDs in a Cisco Aironet 1250 Series Access Point.