Filter
Top Products
7-12
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-29225-01
Chapter 7 Configuring Multiple SSIDs
Assigning IP Redirection for an SSID
Guidelines for Using IP Redirection
Keep these guidelines in mind when using IP redirection:
• The access point does not redirect broadcast, unicast, or multicast BOOTP/DHCP packets received
from client devices.
• Existing ACL filters for incoming packets take precedence over IP redirection.
Configuring IP Redirection
Beginning in privileged EXEC mode, follow these steps to configure IP redirection for an SSID:
Note ACL logging is not supported on the bridging interfaces of access point platforms. When applied on a
bridging interface, it works as if the interface were configured without the log option, and logging does
not take effect. However ACL logging does work for the BVI interfaces as long as a separate ACL is
used for the BVI interface.
This example shows how to configure IP redirection for an SSID without applying an ACL. The access
point redirects all packets that it receives from client devices associated to the SSID batman:
AP# configure terminal
AP(config)# interface dot11radio 0
AP(config-if)# ssid batman
AP(config-if-ssid)# ip redirection host 10.91.104.91
AP(config-if-ssid-redirect)# end
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface dot11radio { 0 | 1 } Enter interface configuration mode for the radio interface.
The 2.4-GHz radio and the 2.4-GHz 802.11n radio is 0.
The 5-GHz radio and the 5-GHz 802.11n radio is 1.
Step 3
ssid ssid-string Enter configuration mode for a specific SSID.
Step 4
ip redirection host ip-address Enter IP redirect configuration mode for the IP address. Enter
the IP address with decimals, as in this example: 10.91.104.92
If you do not specify an access control list (ACL) which defines
TCP or UDP ports for redirection, the access point redirects all
packets that it receives from client devices.
Step 5
ip redirection host ip-address
access-group acl in
(Optional) Specify an ACL to apply to the redirection of
packets. Only packets sent to the specific UDP or TCP ports
defined in the ACL are redirected. The access point discards all
received packets that do not match the settings defined in the
ACL. The in parameter specifies that the ACL is applied to the
incoming interface for the access point.