AP MSM310 with 2 VSC and 2 VLAN and AP 420

[rodriguesrui]

I have a network with multiple VLAN's configured. I need to later add 4 AP's WiFi network (MSM310). I had 5 AP 420.
2 VSC configured each of the new APs MSM310, each VSC had a different VLAN as the AP 420.
The AP's 420 function normally in any of the SSIDs, when I connect to a WiFi connection MSM310 Wireless is constantly falling but is able to receive IP via DHCP.
The MSM310 LAN port belongs to VLAN management.
These are the configs of the Switch:

...

ip default-gateway 201.0.0.237  #this is the core switch

...

vlan 1
   name "DEFAULT_VLAN"
   untagged 1-19,21-24,26
   ip address 201.0.0.243 255.255.255.0
   tagged 25
   no untagged 20
   exit
vlan 11
   name "WIFI_EXT"
   ip address 10.0.0.243 255.255.255.0
   ip helper-address 10.0.0.254
   tagged 9,13-14,25
   exit
vlan 12
   name "WIFI_INT"
   ip address 192.168.12.243 255.255.255.0
   ip helper-address 192.168.12.254
   tagged 9,13-14,25
   exit

...
On port 13 i have a AP 420

on port 14 i have a MSM310

AP420 config:

...

[ethernet]
speed-duplex=auto
broadcast-limiting-enable=false
ether-interface-status=Up
ether-admin-status=Up
dhcp=false
address=201.0.0.222
netmask=255.255.255.0
gateway=201.0.0.254
primary-dns-address=201.0.0.168
secondary-dns-address=201.0.0.167

....

[radio-interface1/ssid1]
ssid-enable=true
ssid=W-comp
primary-ssid=true
closed-system=false
default-vlan-id=11
vlan-tagging=true
wpa-version=1+2
security-suite=8
auth-mode=open
encryption=yes
wpa-mode=required
wpa2-mode=required
wpa-key-mgmt=psk
wpa-preshared-key=****
wpa-cipher-ucast=aes and tkip
wpa-cipher-mcast=tkip
wep-default-key=0
radius-mac-format=no delimeter
radius-vlanid-format=hex
primary-authentication-server=201.0.0.166
primary-authentication-port=1812
primary-authentication-secret=****
primary-authentication-timeout=5
primary-authentication-retries=3
secondary-authentication-server=0.0.0.0
secondary-authentication-port=1812
secondary-authentication-secret=****
secondary-authentication-timeout=5
secondary-authentication-retries=3
802.1X-authenticator-mode=disable
802.1X-reauthentication-interval=0
802.1X-multicast-key-refresh-interval=0
802.1X-unicast-key-refresh-interval=0
mac-authentication-mode=disable
mac-authentication-session-timeout=0
pre-auth=false
local-mac-permission=allow

...

[radio-interface1/ssid2]
ssid-enable=true
ssid=!comp!
primary-ssid=false
default-vlan-id=12
vlan-tagging=true
wpa-version=1+2
security-suite=8
auth-mode=open
encryption=yes
wpa-mode=required
wpa2-mode=required
wpa-key-mgmt=psk
wpa-preshared-key=****
wpa-cipher-ucast=aes and tkip
wpa-cipher-mcast=tkip
wep-default-key=0
radius-mac-format=no delimeter
radius-vlanid-format=hex
primary-authentication-server=0.0.0.0
primary-authentication-port=1812
primary-authentication-secret=****
primary-authentication-timeout=5
primary-authentication-retries=3
secondary-authentication-server=0.0.0.0
secondary-authentication-port=1812
secondary-authentication-secret=****
secondary-authentication-timeout=5
secondary-authentication-retries=3
802.1X-authenticator-mode=disable
802.1X-reauthentication-interval=0
802.1X-multicast-key-refresh-interval=0
802.1X-unicast-key-refresh-interval=0
mac-authentication-mode=disable
mac-authentication-session-timeout=0
pre-auth=false
local-mac-permission=allow

MSM310 config:

...

<INTERFACE-1>
    interface = br0
    hwaddr = ""
    afname = inet
    address = 201.0.0.221
    broadcast = 201.0.0.255
    netmask = 255.255.255.0
    dstaddress = ""
    flags = "UP BCST RUN MULTCST "
    mtu = 1500
    metric = 1
    txqlen = 1000

...

<INTERFACE-VLAN-1>
    interface = eth1
    vlan-id = 11
    display-name = W-comp
    address-type = none
    nat = DISABLED
    address = ""
    netmask = ""
    gateway = ""
    network-def-uid = fcf3c8ad00000001

...
  <INTERFACE-VLAN-2>
    interface = eth1
    vlan-id = 12
    display-name = !comp!
    address-type = none
    nat = DISABLED
    address = ""
    netmask = ""
    gateway = ""
    network-def-uid = fcf3c8ad00000002

Don't know if I have to do something more peculiar in the new 4 AP's.

P.S. This thread has been moevd from Communications, Wireless (Legacy ITRC forum) to MSM Series. - Hp Forum Moderator

[rodriguesrui]

One thing that call my atention was this:

in AP 420 i have:

[management]
cli-prompt=HP ProCurve Access Point 420
vlan-enable=true
dynamic-vlan-id=false
management-vlan-id=1
management-vlan-tagging=true
iapp-enable=true
svp-supported=false
reset-button=true
serial-console=true
http-enable=false
http-port=80
https-enable=true
https-port=443
telnet-enable=false
telnet-max-sessions=4
ssh-enable=true
ssh-port=22

In MSM310 i have this:

<PORT-WAN>
    interface = eth0
    vlan = 0
    vlan-management-filter = DISABLED
    default-vlan-compatibility = DISABLED
  <PORT-LAN>
    bridging-to-wireless = ENABLED
    interface = br0
    vlan = 0
    vlan-management-filter = DISABLED
    default-vlan-compatibility = DISABLED
    static-default-gw-destination = 201.0.0.237
    address-type = STATIC

[rodriguesrui]

Found the problem:

"Wireless security filters"

I disabled this option and now everything is working fine.

Thanks to all.