CISCO 871W configuration for Small Offices

For this article, we have the following environment:

          – Wireless VLAN GUESTS with network 192.168.1.0/24</strong
          – Wireless VLAN INTERNAL with network 10.0.0.0/24

 

Reset Router to Factory Default:

– Router# wr erase
<confirm>

– Turn the router off
– Turn the router on again pressing the reset bottom at the back.

 

I recommend, every step you do, to save your configuration

 

– After you reset your router to factory defaults, when you turn it on again it will ask you some questions. These questions will set the basic configuration on your router. If you know how to do it by command line, you can chose “no”. For this tutorial, I will show how to configure everything in an easy way.

 

 

Creating VLANs

 

Now, we will start to create our VLANs. We will set a VLAN for guests and another to be used for internal people.

 

 

Services, security and logging configurations required

 

First we set up our router with some standard best-practices.

 

 

Authentication, Authorization and Accounting

 

This command allows an administrator to configure granular access and auditing to an IOS device.

 

Others configurations required

 

 

Configuring Radio and SSID`s

 

At this step, we will configure our router’s radio. We just have one radio interface in this device, but we can split this radio in two parts and encapsulate them. There are some important configurations here. Look out!

 

 

GUESTS and INTERNAL will be the SSID’s of our networks. You can choose their names. If you do, I recommend changing every time this name appears again in this tutorial.

 

 

In this part, we will start the encapsulated radio configuration.

 

 

At this part, we will configure the VLAN’s

 

 

“A BVI (Bridge Group Virtual Interface) is a routed interface that represents a set of interfaces that get bridged.”

 

Now we  define a default route. Here we will set our default gateway

 

 

Now, we will configure ours permission lists and bridge protocols

 

 

Next step is configure ours dhcp and excluded dhcp

 

 

Finalizing the main configuration, we will configure our WAN port

 

 

After doing all configurations, turn the interfaces on that you will use and set which VLAN it will access.

 

 

It is a good idea to reload the router after all configurations

 

Login with a User and Pass.

 

If you want to more security for your router access, you might use this configuration. It will create a login before you enable your router.

 

 

This part is to set a password on auxiliary port

 

 

This part is to set a password on Virtual Terminal Lines

 

 

Complete Config Cisco 871w

 

Fonts:

 

https://learningnetwork.cisco.com/docs/DOC-7905

http://www.piglet-net.net/tech/cisco/cisco-871W-simple.html

https://supportforums.cisco.com/docs/DOC-16020

http://serverfault.com/questions/254347/what-is-a-cisco-bvi-interface-what-is-it-used-for