CISCO 871W configuration for Small Offices

For this article, we have the following environment:

          – Wireless VLAN GUESTS with network</strong
          – Wireless VLAN INTERNAL with network


Reset Router to Factory Default:

– Router# wr erase

– Turn the router off
– Turn the router on again pressing the reset bottom at the back.


I recommend, every step you do, to save your configuration


– After you reset your router to factory defaults, when you turn it on again it will ask you some questions. These questions will set the basic configuration on your router. If you know how to do it by command line, you can chose “no”. For this tutorial, I will show how to configure everything in an easy way.



Creating VLANs


Now, we will start to create our VLANs. We will set a VLAN for guests and another to be used for internal people.



Services, security and logging configurations required


First we set up our router with some standard best-practices.



Authentication, Authorization and Accounting


This command allows an administrator to configure granular access and auditing to an IOS device.


Others configurations required



Configuring Radio and SSID`s


At this step, we will configure our router’s radio. We just have one radio interface in this device, but we can split this radio in two parts and encapsulate them. There are some important configurations here. Look out!



GUESTS and INTERNAL will be the SSID’s of our networks. You can choose their names. If you do, I recommend changing every time this name appears again in this tutorial.



In this part, we will start the encapsulated radio configuration.



At this part, we will configure the VLAN’s



“A BVI (Bridge Group Virtual Interface) is a routed interface that represents a set of interfaces that get bridged.”


Now we  define a default route. Here we will set our default gateway



Now, we will configure ours permission lists and bridge protocols



Next step is configure ours dhcp and excluded dhcp



Finalizing the main configuration, we will configure our WAN port



After doing all configurations, turn the interfaces on that you will use and set which VLAN it will access.



It is a good idea to reload the router after all configurations


Login with a User and Pass.


If you want to more security for your router access, you might use this configuration. It will create a login before you enable your router.



This part is to set a password on auxiliary port



This part is to set a password on Virtual Terminal Lines



Complete Config Cisco 871w