Workgroup Bridges

Cisco Workgroup Bridges

A workgroup bridge (WGB) is an access point mode that

  • provides wireless connectivity to wired clients connected on its Ethernet port

  • connects a wired network to an existing wireless infrastructure through a single wireless segment, and

  • learns the MAC addresses of its wired clients and reports them to the wireless LAN controller (WLC) using IAPP messaging.

The WGB establishes a single wireless connection to the root access point (AP). The root AP treats the WGB as a wireless client, allowing the wired devices behind the WGB to access the wireless network seamlessly. Suppose you have a group of wired devices in a conference room with no Ethernet drop available. You can connect these devices to a WGB, which allows them to communicate over the enterprise wireless network as if they were wireless clients.

Figure 1. Example of a WGB

The mode supported in WGB for Embedded Wireless Controller is:

  • Flex Mode: Central authentication and local switching.


    Note

    Cenral authentication is supported on Wave 1 and Wave 2 APs, whereas local switching is supported only on Wave 2 APs.

These features are supported for use with WGB:

Table 1. WGB Feature Matrix

Feature

Cisco Wave 1 APs

Cisco Wave 2

802.11r

Supported

Supported

QOS

Supported

Supported

UWGB mode

Supported

Supported on Wave 2 APs

IGMP Snooping or Multicast

Supported

Supported

802.11w

Supported

Supported

PI support (without SNMP)

Supported

Not supported

IPv6

Supported

Supported

VLAN

Supported

Supported

802.11i (WPAv2)

Supported

Supported

Broadcast tagging/replicate

Supported

Supported

Unified VLAN client

Implicitly supported (No CLI required)

Supported

WGB client

Supported

Supported

802.1x – PEAP, EAP-FAST, EAP-TLS

Supported

Supported

NTP

Supported

Supported

Wired client support on all LAN ports

Supported in Wired-0 and Wired-1 interfaces

Supported in all Wired-0, 1 and LAN ports 1, 2, and 3
Table 2. Supported Access Points and Requirements

Access Points

Requirements

Cisco Aironet 2700, 3700, and 1572 Series

Requires autonomous image.

Cisco Aironet 2800, 3800, 4800, 1562, and Cisco Catalyst 9105, 9115, IW6300 and ESW6300 Series

CAPWAP image starting from Cisco AireOS 8.8 release.

Configuring Workgroup Bridge on a WLAN

Procedure

  Command or Action Purpose

Step 1

configure terminal

Example:

Device# configure terminal

Enters global configuration mode.

Step 2

wlan profile-name

Example:

Device(config)# wlan wlan-profile

Enters WLAN configuration submode. The wlan-profile is the profile name of the configured WLAN.

Step 3

ccx aironet-iesupport

Example:

Device(config-wlan)# ccx aironet-iesupport

Enables support for Aironet IEs for this WLAN.

Step 4

no shutdown

Example:

Device(config-wireless-policy)# no shutdown

Restarts the WLAN.

Verifying the Status of Workgroup Bridges

  • To verify the number of WGBs, use the following command:

    show wireless wgb summary

    The following is a sample output:

    Device#show wireless wgb summary 
Number of WGBs: 1
MAC Address    AP Name                          WLAN State              Clients
---------------------------------------------------------------------------------
7070.8b7a.7030 Ed2-JFW-AP1                      1    Run                1    

  • To verify WGB details, use the following command:

    show wireless wgb mac-address MAC-address detail

    The following is a sample output:

    Device#show wireless wgb mac-address 7XXX.8XXa.7XXX detail 
 
Work Group Bridge
 
MAC Address        : 7XXX.8XXa.7XXX
AP Name            : Ed2-JFW-AP1
WLAN ID            : 1
State              : Run
 
Number of Clients: 1
 
MAC Address
------------
d8XX.97XX.bXXX

  • To view the client details on the controller, use the following command:

    show wireless client mac-address MAC-address detail

    The following is a sample output:

    Device#show wireless client mac-address 7XXX.8bXX.70XX detail

Workgroup Bridge
Wired Client count : 1

  • The following is a sample output:

    Device#show wireless client mac-address d8XX.97XX.b0XX detail
Workgroup Bridge Client
WGB MAC Address : 7XXX.8bXX.70XX