Workgroup Bridge

WGBs allow wired networks to be bridged across a wireless connection

WGB is a special client and is treated differently by the root AP

WGB uses IAPP (Inter-Access Point Protocol) to advertise its wired clients to the root AP

Root APs only allow traffic to be sent to wired clients if they have been advertised via IAPP

WGBs are generally meant to support small numbers or wired clients and a single VLAN, generally connect to the same SSID that regular wireless clients use

WGB connects to the SSID of the Root AP and completes association as a client

WGBs can connect to any type of SSID security except for Guest Portals

SSID does not need to be broadcast

BPDUs do not flow across the link in current versions; this can create a loop in the layer 2 network

Root AP Configuration

dot11 ssid BRIDGE
  authentication open
  authentication key-management wpa version 2
  wpa-psk ascii PASSWORD
	
int d1
  encryption mode ciphers aes
  ssid BRIDGE
  no shut

WGB AP Configuration

dot11 ssid BRIDGE
  authentication open
  authentication key-management wpa version 2
  wpa-psk ascii PASSWORD
	
int d1
  encryption mode ciphers aes
  ssid BRIDGE
  station-role workgroup-bridge
  no shut

Verification Commands

show dot11 associations

show bridge verbose