AP-7522 Client Bridging Isn't Working

[Aaron_Wright]

I have two AP-7522 access points. Both have version 5.9.1.4-004R. Both receive their power and network through a Symbol AP-PSBIAS-2P2-AFR "brick". I set the country name to "United States-us" on both because I read the radios will not turn on until you do.

AP#1 - This is the "host" access point connected to the wired LAN with access to the internet. The internal network is 192.168.1.0/24. I've given this AP the IP address 192.168.1.101. I configured a wireless network with SSID "myWireless", Secure-PSK, WPA2-CCMP, and the key is "myWirelessKey". Radio 1 is 2.4GHz, radio 2 is 5GHz.

AP#2 - This is the "client" access point that I want to bridge to AP#1. I have AP#2 connected to an unmanaged 5 port switch, which also connects a desktop PC. It's this desktop PC that needs access to the internet. I've given this AP the IP address 192.168.1.101. For the bridging configuration I followed the directions here (https://extremeportal.force.com/ExtrArticleDetail?an=000082884)

• en
• conf t
• profile
• interface radio 2
• rf-mode bridge
• bridge ssid myWireless
• bridge vlan 1
• bridge encryption-type ccmp
• bridge authentication-type none
• bridge wpa-wpa2 psk 0 myWirelessKey
• no bridge eap username
• no bridge eap password
• bridge eap type peap-mschapv2
• bridge roam-criteria missed-beacons 20
• bridge roam-criteria rssi-threshold -75
• bridge channel-list 5GHz 36,40,44,48
• bridge channel-list 2.4GHz
• comm wr

However when I run "show wireless bridge candidate-ap" it reports 0 candidate APs. AP#1 shows no wireless clients. The workstation can successfully ping AP#2 and vice versa. I am able to reach the web interface and ssh on AP#1 on the 192.168.1.0/24 network. But AP#1 can't ping AP#2 and vice versa. Nothing on the 192.168.1.0/24 network can ping AP#2 or the desktop PC. The desktop PC cannot reach anything on the 192.168.1.0/24 network.

Right now both APs are in the same room, 10 feet from each other, no physical obstacles between them.

In my searching I also found (https://extremeportal.force.com/ExtrArticleDetail?an=000063492) I tried the solution there but it didn't help.

Does anyone know what I'm doing wrong, or what I'm missing?

Additional questions:
1 - Do I have to configure any bridging properties on the AP#1 that is connected to the wired network with internet access? None of the guides I've read mention anything about configuration on the "host" AP, but since I can't get this working I'm wondering if some configuration is necessary on AP#1.

2 - Do I have to load a special firmware version to be able to access bridging configuration in the web GUI? Right now none of those configuration options are there and I have to do everything through ssh/command line. I know this was the case for some APs in the past that didn't have a web GUI at all and you had to download the firmware that included the GUI.

Thanks for any help you can provide!
Aaron

[ckelly]

yes, there is weekend support. Someone should be able to help you with that.

[Aaron_Wright]

Apparently I have to be approved before I can download the latest firmware. Do you know if anyone is monitoring that over the weekend? I don't want to sit and watch my Inbox if nobody is going to get to it until Monday.

[ckelly]

This all looks correct, Aaron. Hoping that the firmware upgrade gets things going at this point.

[Aaron_Wright]

I'm going to start working on a firmware upgrade now.

[Aaron_Wright]

Full config:

!
! Configuration of AP7522 version 5.9.1.4-004R
!
!
version 2.5
!
!
client-identity-group default
load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
permit any
!
firewall-policy default
no ip dos tcp-sequence-past-window
no stateful-packet-inspection-l2
ip tcp adjust-mss 1400
!
!
mint-policy global-default
!
meshpoint-qos-policy default
!
wlan-qos-policy default
qos trust dscp
qos trust wmm
!
radio-qos-policy default
!
!
management-policy default
telnet
no http server
https server
ssh
user admin password 1 role superuser access all
snmp-server community 0 private rw
snmp-server community 0 public ro
snmp-server user snmptrap v3 encrypted des auth md5 0
snmp-server user snmpmanager v3 encrypted des auth md5 0
!
nsight-policy default
!
profile ap7522 default-ap7522
autoinstall configuration
autoinstall firmware
crypto ikev1 policy ikev1-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ikev2 policy ikev2-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
crypto ikev1 remote-vpn
crypto ikev2 remote-vpn
crypto auto-ipsec-secure
crypto load-management
crypto remote-vpn-client
interface radio1
shutdown
interface radio2
rf-mode bridge
bridge ssid myWireless
bridge encryption-type ccmp
bridge wpa-wpa2 psk 0 myWirelessKey
interface ge1
interface vlan1
ip address dhcp
ip address zeroconf secondary
ip dhcp client request options all
interface pppoe1
use firewall-policy default
use client-identity-group default
logging on
service pm sys-restart
router ospf
adoption-mode controller
!
rf-domain default
country-code us
use nsight-policy default
!
ap7522 B8-50-01-A8-19-50
use profile default-ap7522
use rf-domain default
hostname ap7522-A81950
interface vlan1
ip address 192.168.111.102/24
no virtual-controller
rf-domain-manager capable
no adoption-mode
!
!
end