For this article, we have the following environment:
– Wireless VLAN GUESTS with network 192.168.1.0/24</strong
– Wireless VLAN INTERNAL with network 10.0.0.0/24
Reset Router to Factory Default:
- Router# wr erase
- Turn the router off
- Turn the router on again pressing the reset bottom at the back.
I recommend, every step you do, to save your configuration
- After you reset your router to factory defaults, when you turn it on again it will ask you some questions. These questions will set the basic configuration on your router. If you know how to do it by command line, you can chose “no”. For this tutorial, I will show how to configure everything in an easy way.
Now, we will start to create our VLANs. We will set a VLAN for guests and another to be used for internal people.
Services, security and logging configurations required
First we set up our router with some standard best-practices.
Authentication, Authorization and Accounting
This command allows an administrator to configure granular access and auditing to an IOS device.
Others configurations required
Configuring Radio and SSID`s
At this step, we will configure our router’s radio. We just have one radio interface in this device, but we can split this radio in two parts and encapsulate them. There are some important configurations here. Look out!
GUESTS and INTERNAL will be the SSID’s of our networks. You can choose their names. If you do, I recommend changing every time this name appears again in this tutorial.
In this part, we will start the encapsulated radio configuration.
At this part, we will configure the VLAN’s
“A BVI (Bridge Group Virtual Interface) is a routed interface that represents a set of interfaces that get bridged.”
Now we define a default route. Here we will set our default gateway
Now, we will configure ours permission lists and bridge protocols
Next step is configure ours dhcp and excluded dhcp
Finalizing the main configuration, we will configure our WAN port
After doing all configurations, turn the interfaces on that you will use and set which VLAN it will access.
It is a good idea to reload the router after all configurations
Login with a User and Pass.
If you want to more security for your router access, you might use this configuration. It will create a login before you enable your router.
This part is to set a password on auxiliary port
This part is to set a password on Virtual Terminal Lines