Today I learnt to create SSID with different authentication in my test LAB on cisco Autonomous AP.
In this post, will see the configuration for one SSID with WPA authentication
Before starting the configuration, there are few things which we should remember:
- SSID are a case sensitive and can contain up to 32 alphanumeric characters.
- There should be no space in SSID.
- There is limitation of max SSID on cisco AP(Depends on which model you have)
- If there is only one SSID then we must use guest-mode command under SSID.
- If we have multiple SSID then :
Mbssid under the radio interface and mbssid guest-mode under SSID config section
Dot11 mbssid under the global config section and mbssid guest-mode under the SSID config section
Just few things:
- I have a DHCP server config on my Cisco Switch in VLAN 101.
- Vlan 100 is for management.
Let’s start with the configuration:
Fist switch side configuration for this AP is:
int fa 0/15 switchport mode trunk switchport trunk encapsulation dot1q switchport trunk allowed vlan 100, 101
Step1: Configure the SSID and map to a VLAN
Config t Dot11 ssid data1 Vlan 101 Authentication open Authentication key-management wpa version 1 wpa-psk ascii cisco123 Guest-mode ------> To broadcast the SSID end
Step2: Configure the radio and Ethernet interface
Interface dot11Radio0 ssid data1----->Mapping the SSID to Radio Interface exit ! Interface dot11Radio0.100 encapsulation dot1Q 80 ! Interface dot11Radio0.101 encapsulation dot1Q 101 bridge-group 101 exit ! int fa 0.100 encapsulation dot1Q 100 ! Interface fa0.101 encapsulation dot1Q 101 bridge-group 101 exit
Step3: Assign encryption (if wpa or wpa2 types is used) to SSIDs with VLAN
Int dot11Radio0 encryption vlan 101 mode ciphers tkip
Step4: Configure AP for management
Int BVI1 Ip address 10.35.100.250 255.255.255.0 ! Ip default-gateway 10.35.100.254
Step5: To verify the results:
- Sh ip int br
ap#sh ip int brief Interface IP-Address OK? Method Status Protocol BVI1 10.35.100.250 YES manual up up Dot11Radio0 unassigned YES unset up up Dot11Radio0.100 unassigned YES unset up up Dot11Radio0.101 unassigned YES unset up up Dot11Radio1 unassigned YES unset administratively down down FastEthernet0 unassigned YES other up up FastEthernet0.100 unassigned YES unset up up FastEthernet0.101 unassigned YES unset up up
- Sh dot11 associations
ap#sh dot11 associations 802.11 Client Stations on Dot11Radio0: SSID [data1] MAC Address IP address Device Name Parent State 5426.963e.4bee 10.35.101.251 unknown - self Assoc