Multiple SSID configurations on Autonomous AP

We will follow the same procedure as I did for Single SSID on Standalone AP.

Here I will add one more VLAN and that is 102

Fist switch side configuration for this AP is:

int fa 0/15
  switchport mode trunk
  switchport trunk encapsulation dot1q
  switchport trunk allowed vlan 100, 101,102

Step1: Configure the SSID and map to a VLAN

Dot11 ssid data1
 Vlan 101
 Authentication open
 Authentication key-management wpa version 1
 Wpa-psk ascii cisco123
 Mbssid Guest-mode------> To broadcast the multiple SSID
 end
 !
 Dot11 ssid data2
 Vlan 102
 Authentication open
 Authentication key-management wpa version  2
 Wpa-psk accii Cisco12345
 Mbssid Guest-mode
 end

Step2: Configure the radio and Ethernet interface

Config t
 Interface dot11Radio0
 ssid data1
 ssid data2
 exit
 !
 Interface dot11Radio0.100
 encapsulation dot1Q 100
 !
 Interface dot11Radio0.101
 encapsulation dot1Q 101
 bridge-group 101
 exit
 !
 Interface dot11Radio0.102
 encapsulation dot1Q 102
 bridge-group 102
 exit
 !
 int fa 0.100
 encapsulation dot1Q 100
 !
 Interface fa0.101
 encapsulation dot1Q 101
 bridge-group 101
 exit
 !
 Interface fa0.102
 encapsulation dot1Q 102
 bridge-group 102
 exit

Step3: Assign encryption to SSIDs with VLAN

Int dot11Radio0
 Encryption vlan 101 mode  ciphers tkip
 Encryption vlan 102 mode  ciphers aes-ccm
 mbssid

Step4: Configure AP for management

Int BVI1
 Ip address 10.35.100.250 255.255.255.0
 Ip default-gateway 10.35.100.254
 No shut
 end

Step5: To verify the results:

Sh ip int br

ap#sh ip int brief
 Interface                  IP-Address      OK? Method Status                Protocol
 BVI1                       10.35.100.250    YES manual up                    up
 Dot11Radio0                unassigned      YES unset  up                    up
 Dot11Radio0.100             unassigned      YES unset  up                    up
 Dot11Radio0.101             unassigned      YES unset  up                    up
 Dot11Radio0.102             unassigned      YES unset  up                    up
 Dot11Radio1                unassigned      YES unset  administratively down down
 FastEthernet0              unassigned      YES other  up                    up
 FastEthernet0.100           unassigned      YES unset  up                    up
 FastEthernet0.101           unassigned      YES unset  up                    up
 FastEthernet0.102           unassigned      YES unset  up                    up

Sh dot11 association

 ap#sh dot11 associations
 802.11 Client Stations on Dot11Radio0:
 SSID [data2] :
 MAC Address    IP address      Device        Name            Parent         State
 5426.963e.4bee 10.35.102.251    unknown       -               self           Assoc
 ap#sh dot11 associations
 802.11 Client Stations on Dot11Radio0:
 SSID [data1] :
 MAC Address    IP address      Device        Name            Parent         State
 5426.963e.4bee 10.35.101.251    unknown       -               self           AssoC
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s