Just for managment, I wasn't able to ping from mgt int on ap to PF vlan int IP.
-W - Wade Blackwell "Integrity is often more painful and always more profitable than perception management" On Tue, 2007-12-18 at 21:03 -0700, RB wrote: > What do you mean you can't pass traffic? You can't get ICMP off of a > wireless client, can't ping the VLAN interface, what? > > When I hooked my 1230 directly up to my pfSense system, I couldn't > reach VLAN interfaces on the AP, I had to use BVIs. If I may ask, why > do you need a layer 3 interface on the AP (other than mgt) anyway? > > To address Curtis' note, mine is talking on the 'native' VLAN just fine. > > Correct or not, an excerpt from mine: > > interface Dot11Radio0 > no ip address > no ip route-cache > no dot11 extension aironet > no cdp enable > bridge-group 1 > bridge-group 1 block-unknown-source > no bridge-group 1 source-learning > no bridge-group 1 unicast-flooding > bridge-group 1 spanning-disabled > ! > interface Dot11Radio0.20 > encapsulation dot1Q 20 > no ip route-cache > no cdp enable > bridge-group 20 > bridge-group 20 subscriber-loop-control > bridge-group 20 block-unknown-source > no bridge-group 20 source-learning > no bridge-group 20 unicast-flooding > bridge-group 20 spanning-disabled > ! > interface FastEthernet0 > no ip address > no ip route-cache > duplex auto > speed auto > no cdp enable > bridge-group 1 > no bridge-group 1 source-learning > bridge-group 1 spanning-disabled > ! > interface FastEthernet0.20 > encapsulation dot1Q 20 > no ip route-cache > no cdp enable > bridge-group 20 > no bridge-group 20 source-learning > bridge-group 20 spanning-disabled > ! > interface BVI1 > ip address dhcp > no ip route-cache > ! > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]