Single SSID configuration on Autonomous AP

Today I  learnt to create SSID with different authentication in my test LAB on cisco Autonomous AP.

In this post, will see the configuration for one SSID with WPA authentication

Before starting the configuration, there are few things which we should remember:

    • SSID are a case sensitive and can contain up to 32 alphanumeric characters.
    • There should be no space in SSID.
    • There is limitation of max SSID on cisco AP(Depends on which model you have)
    • If there is only one SSID then we must use guest-mode command under SSID.
    • If we have multiple SSID then :

Mbssid under the radio interface and mbssid guest-mode under SSID config section
Dot11 mbssid under the global config section and mbssid guest-mode under the SSID config section

Just few things:

      • I have a DHCP server config on my Cisco Switch in VLAN 101.
      • Vlan 100 is for management.

Let’s start with the configuration:

Fist switch side configuration for this AP is:

int fa 0/15
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101

 Step1: Configure the SSID and map to a VLAN

Config t
 Dot11 ssid data1
 Vlan 101
 Authentication open
 Authentication key-management wpa version 1
 wpa-psk ascii cisco123
 Guest-mode ------> To broadcast the SSID

 Step2: Configure the radio and Ethernet interface

Interface dot11Radio0
  ssid data1----->Mapping the SSID to Radio Interface
 Interface dot11Radio0.100
  encapsulation dot1Q 80
 Interface dot11Radio0.101
  encapsulation dot1Q 101
  bridge-group 101
 int fa 0.100
  encapsulation dot1Q 100
 Interface fa0.101
  encapsulation dot1Q 101
  bridge-group 101

Step3: Assign encryption (if wpa or wpa2 types is used) to SSIDs with VLAN

Int dot11Radio0
 encryption vlan 101 mode ciphers tkip

Step4: Configure AP for management

Int BVI1
Ip address
Ip default-gateway

Step5: To verify the results:

      1. Sh ip int br
ap#sh ip int brief
 Interface                  IP-Address      OK? Method Status                Protocol
 BVI1                 YES manual up                    up
 Dot11Radio0                unassigned      YES unset  up                    up
 Dot11Radio0.100             unassigned      YES unset  up                    up
 Dot11Radio0.101             unassigned      YES unset  up                    up
 Dot11Radio1                unassigned      YES unset  administratively down down
 FastEthernet0              unassigned      YES other  up                    up
 FastEthernet0.100           unassigned      YES unset  up                    up
 FastEthernet0.101           unassigned      YES unset  up                    up
      1. Sh dot11 associations
ap#sh dot11 associations
 802.11 Client Stations on Dot11Radio0:
 SSID [data1] 
 MAC Address    IP address      Device        Name            Parent         State
 5426.963e.4bee    unknown       -               self           Assoc


  1. Pingback: Multiple SSID configurations on Autonomous AP | Towards CCIE Wireless

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s