From: Carlos G Mendioroz (tron@huapi.ba.ar)
Date: Tue Apr 08 2008 - 07:19:52 ART
By "local" you mean not through ADSL, right ?
Same room... may be you are transmitting with too much power.
100mW may be ? Try bringing that down to 10.
Easy check ? Remove the antenas :)
-Carlos
Joshua @ 08/04/2008 02:20 -0300 dixit:
> Hi Group,
>
> I am testing Cisco 871W in a lab environment. The WAN ckt is ADSL. The
> router will talk to an internal RADIUS server via IPSec VPN for
> authentication. I observered the local latency is very hign and not stable.
> The wireless client (Windows XP SP2 with default wireless utility) is in the
> same room of the router. I expected 3ms lateney, but it gave average latency
> about 120ms. This Cisco 871W is running
> "ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
>
> MRM_871-Eng uptime is 4 days, 7 hours, 16 minutes
> System returned to ROM by power-on
> System image file is "flash:c870-advsecurityk9-mz.124-4.T8.bin"
>
> Can anybody give me some thought what could be wrong?
>
> ============Cisco 871W Configuraiton as Below=============
> Wireless_871#sh run
> Building configuration...
> Current configuration : 5082 bytes
> !
> version 12.4
> no service pad
> service timestamps debug datetime msec
> service timestamps log datetime msec
> no service password-encryption
> !
> hostname Wireless_871
> !
> boot-start-marker
> boot-end-marker
> !
> logging buffered 4096 debugging
> !
> aaa new-model
> !
> !
> aaa group server radius server-group-1
> server 10.10.7.4 auth-port 1645 acct-port 1646
> !
> aaa authentication login eap_methods group server-group-1
> !
> aaa session-id common
> !
> resource policy
> !
> ip subnet-zero
> ip cef
> no ip dhcp use vrf connected
> ip dhcp excluded-address 10.9.88.1 10.9.88.20
> !
> ip dhcp pool client
> network 10.9.88.0 255.255.255.0
> default-router 10.9.88.2
> domain-name lab.net
> dns-server 10.10.5.68
> !
> !
> no ip domain lookup
> ip domain name lab.net
> ip name-server 10.10.5.68
> !
> !
> username test passwork test
> !
> !
> crypto isakmp policy 10
> encr 3des
> hash md5
> authentication pre-share
> crypto isakmp key LetMeInP address 200.200.178.100
> !
> !
> crypto ipsec transform-set myset esp-3des esp-md5-hmac
> !
> crypto map mymap 10 ipsec-isakmp
> set peer 200.200.178.100
> set transform-set myset
> match address 150
> !
> bridge irb
> !
> !
> interface FastEthernet0
> !
> interface FastEthernet1
> !
> interface FastEthernet2
> !
> interface FastEthernet3
> !
> interface FastEthernet4
> ip address dhcp
> ip nat outside
> ip virtual-reassembly
> duplex auto
> speed auto
> crypto map mymap
> !
> interface Dot11Radio0
> no ip address
> no snmp trap link-status
> !
> broadcast-key change 900
> !
> !
> !
> encryption vlan 1 mode ciphers tkip
> !
> ssid LedcorWLAN
> vlan 1
> authentication open eap eap_methods
> authentication key-management wpa
> guest-mode
> !
> speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0
> 48.0 54.0
> channel 2462
> station-role root
> no cdp enable
> !
> interface Dot11Radio0.1
> encapsulation dot1Q 1 native
> no snmp trap link-status
> no cdp enable
> bridge-group 1
> bridge-group 1 subscriber-loop-control
> bridge-group 1 spanning-disabled
> bridge-group 1 block-unknown-source
> no bridge-group 1 source-learning
> no bridge-group 1 unicast-flooding
> !
> interface Vlan1
> no ip address
> ip nat inside
> ip virtual-reassembly
> ip tcp adjust-mss 1452
> bridge-group 1
> bridge-group 1 spanning-disabled
> !
> interface BVI1
> ip dhcp client update dns
> ip ddns update test
> ip address 10.9.88.2 255.255.255.0
> ip nat inside
> ip virtual-reassembly
> !
> ip classless
> !
> ip http server
> ip http secure-server
> ip nat inside source route-map internet interface FastEthernet4 overload
> !
> ip radius source-interface BVI1
> access-list 150 permit ip 10.9.88.0 0.0.0.255 10.10.0.0 0.0.255.255
> access-list 160 deny ip 10.9.88.0 0.0.0.255 10.10.0.0 0.0.255.255
> access-list 160 permit ip 10.9.88.0 0.0.0.255 any
> snmp-server community ledcorsnmp RO
> snmp-server enable traps tty
> no cdp run
> route-map internet permit 10
> match ip address 160
> !
> radius-server attribute 32 include-in-access-req format %h
> radius-server host 10.10.7.4 auth-port 1645 acct-port 1646 key corled
> radius-server retransmit 2
> radius-server timeout 4
> radius-server deadtime 1
> !
> control-plane
> !
> bridge 1 protocol ieee
> bridge 1 route ip
> !
> line con 0
> exec-timeout 0 0
> no modem enable
> line aux 0
> line vty 0 4
> privilege level 15
> password cisco
> transport input telnet ssh
> !
> scheduler max-task-time 5000
> end
>
> Wireless_871#
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Carlos G Mendioroz <tron@huapi.ba.ar> LW7 EQI Argentina
This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:50 ART