CISCO 871W configuration

[septicdeath]

I have a cisco 871w (which I thought had the advance IOS, but have learned I have the standard ios).

Anyways, I have found multiple config templates from places like tech republic, but still need lots of help configuring this thing. I have two or three templates that each allow me to enable a specific function that I wish, but cant seem to combine them to achieve what I want.

Specifically, I desire to have 2 wireless lan segments. The first segment on network a (along with my wired devices) and a 2nd segment that has a complete different dhcp server and devices here cant talk to the first network.

I actually found a config script at tech republic that gets me the dual wlans, dual dhcp assignments and eliminates the cross talking. The problem is, that this script doesnt activate any of the firewall features, and for the life of me, I cant get port forwarding from the outside to my servers inside.

I configured this thing originally with all the firewalls and port forwarding working, and this is the configuration that I am currently running, because I have to have access to services inside my network from outside.

I have tried to "understand what this single wlan config is doing" that mynew dual wlan config isnt doing but at this point, Im looking at raw Cisco IOS and just cant seem to get it.

I have unsuccessfully tried to add the firewall and nat/forwarding to the dual wlan config and gotten nowhere (its fun having to serial connect to the router and clear it and reapply the original configuration <- NOT).

So maybe I should take the other approach and try to extract the dual wlan creation commands and add them to my working port forwarding/nat/firewall configuration.

Anyone here know how one would create 2 wireless lands, assign diffrent dhcp addresses to both, stop the 2 from talking to each other to a existing 871 configuration?

Thanks in advance...

 

[swatbat]

I'm not a fan of those tech republic links as the config files and how they tell you to go about it are not the way I would go. For once it kills the web admin side of the router when you do the write erase that they recomend you start with. You have to go back in and enable it later.

Personaly if you have the original config that you should have backed up before starting I would restore to that and use the web interface. It will be easer to do.

 

[septicdeath]

No, I am past that. I have a serial connection to the router for my config terminal when I need to re-write my working configuration. I have my single wlan configuration working with the nat and port forwarding, the part that I need to add to my existing, is I need to add a second 802.11 wireless lan, assign a different dhcp scope to that nework, and deny the new 192.168.2.0 network from talking to the existing 192.168.0.0 network. I have SDM but doing what I say above is not as easy as one would thing. The wireless configuration add-on doesn't even begin to allow separate dhcp scopes to separate wireless virtual lans.

That make sense?

 

[septicdeath]

any 871 guru;s or cisco experts. Could use some IOS help.

 

[dpisano]

Let’s see if I can help you. First let me make shore that I understand what you want.

Two wireless subnets.
One of the wireless subnets is to be shared with a wired network.
The wireless only subnet should be a DMZ.
Two DHCP pools one for each subnet.
Firewall features need to be enabled.
You need to be able to do port forwarding.

Is this wright?

Just as a side note if the router is new you can have Cisco TAC help you for the first 90 days of the router.