If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports.
TCP: 4244,5222,5223,5228,5242
TCP/UDP: 59234, 50318
UDP: 45395,3478:3484
Also allow access to *.whatsapp.com & *.whatsapp.net
If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports.
TCP: 4244,5222,5223,5228,5242
TCP/UDP: 59234, 50318
UDP: 45395,3478:3484
Also allow access to *.whatsapp.com & *.whatsapp.net
To configure your Aironet 3602i from scratch, we will wipe any existing settings and build the Bridge-Group Virtual Interface (BVI) architecture.
In this scenario:
VLAN 1 (Native): Management (AP gets its IP here).
VLAN 10: User Traffic (SSID: Private_Net).
Hidden SSID: We will use the guest-mode command (or rather, the absence of it) to hide the SSID.
Enter configuration mode and define the encryption for the user VLAN.
enable
configure terminal
# Enable password encryption and basic security
service password-encryption
hostname AP-3602
# Define the SSID
dot11 ssid Private_Net
vlan 10
authentication open
authentication key-management wpa version 2
wpa-psk ascii 0 YourSecretKey123
# Do NOT enter 'guest-mode' here; this keeps the SSID hidden
We must split the physical Ethernet port into sub-interfaces that match the switch's trunk tags.
# Management / Native VLAN
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
# User Data VLAN
interface GigabitEthernet0.10
encapsulation dot1Q 10
bridge-group 10
exit
You must apply the configuration to both the 2.4GHz (Radio0) and 5GHz (Radio1) radios for full coverage.
# --- 2.4GHz Radio Configuration ---
interface Dot11Radio0
encryption vlan 10 mode ciphers aes-ccm
ssid Private_Net
no shutdown
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
interface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10
# --- 5GHz Radio Configuration ---
interface Dot11Radio1
encryption vlan 10 mode ciphers aes-ccm
ssid Private_Net
no shutdown
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
interface Dot11Radio1.10
encapsulation dot1Q 10
bridge-group 10
exit
This is where you assign the static identity to the AP. The IP lives on BVI1, which links to Bridge-group 1.
interface BVI1
ip address 192.168.1.50 255.255.255.0
no shutdown
exit
# Set gateway so you can manage it from other subnets
ip default-gateway 192.168.1.1
Verify that the SSIDs are active and save your work.
# Check that the SSID is up (it should not show 'G' for Guest/Broadcast)
show dot11 bssid
# Save the config
write memory
Switch Side: Ensure your switchport is configured as:
switchport mode trunk
switchport trunk native vlan 1
Hidden SSID Note: Since the SSID is hidden, you will need to manually type "Private_Net" into your devices to connect the first time.
WPA Settings: Ensure you used encryption vlan 10 mode ciphers aes-ccm on the physical radio interfaces, or the WPA2 handshake will fail.
SWITCH_IGNORE_STARTUP_CFG=1 command in the switch: prompt to bypass the configuration, allowing you to reconfigure the password without losing existing settings. switch: prompt.flash_init and press Enter.SWITCH_IGNORE_STARTUP_CFG=1 and press Enter.boot and press Enter.enable to enter privileged EXEC mode.copy flash:config.text system:running-config.conf t) and set a new password: username [name] privilege 15 secret [new_password].no switch: SWITCH_IGNORE_STARTUP_CFG=1 or conf t, system ignore startupconfig.write memory. If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports. TCP: 4244,5222,5223,5228,5242 TC...