User's Manual

7-12
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-11350-01
Chapter 7 Configuring Multiple SSIDs
Assigning IP Redirection for an SSID
Guidelines for Using IP Redirection
Keep these guidelines in mind when using IP redirection:
• The access point does not redirect broadcast, unicast, or multicast BOOTP/DHCP packets received
from client devices.
• Existing ACL filters for incoming packets take precedence over IP redirection.
Configuring IP Redirection
Beginning in privileged EXEC mode, follow these steps to configure IP redirection for an SSID:
This example shows how to configure IP redirection for an SSID without applying an ACL. The access
point redirects all packets that it receives from client devices associated to the SSID batman:
AP# configure terminal
AP(config)# interface dot11radio 0
AP(config-if)# ssid batman
AP(config-if-ssid)# ip redirection host 10.91.104.91
AP(config-if-ssid-redirect)# end
This example shows how to configure IP redirection only for packets sent to the specific TCP and UDP
ports specified in an ACL. When the access point receives packets from client devices associated using
the SSID robin, it redirects packets sent to the specified ports and discards all other packets:
AP# configure terminal
AP(config)# interface dot11radio 0
AP(config-if)# ssid robin
AP(config-if-ssid)# ip redirection host 10.91.104.91 access-group redirect-acl in
AP(config-if-ssid)# end
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface dot11radio { 0 | 1 } Enter interface configuration mode for the radio interface.
Step 3
ssid ssid-string Enter configuration mode for a specific SSID.
Step 4
ip redirection host ip-address Enter IP redirect configuration mode for the IP address. Enter
the IP address with decimals, as in this example: 10.91.104.92
If you do not specify an access control list (ACL) which defines
TCP or UDP ports for redirection, the access point redirects all
packets that it receives from client devices.
Step 5
ip redirection host ip-address
access-group acl in
(Optional) Specify an ACL to apply to the redirection of
packets. Only packets sent to the specific UDP or TCP ports
defined in the ACL are redirected. The access point discards all
received packets that do not match the settings defined in the
ACL. The in parameter specifies that the ACL is applied to the
access point’s incoming interface.