Single SSID configuration on Autonomous AP

Today I  learnt to create SSID with different authentication in my test LAB on cisco Autonomous AP.

In this post, will see the configuration for one SSID with WPA authentication

Before starting the configuration, there are few things which we should remember:

• SSID are a case sensitive and can contain up to 32 alphanumeric characters.
• There should be no space in SSID.
• There is limitation of max SSID on cisco AP(Depends on which model you have)
• If there is only one SSID then we must use guest-mode command under SSID.
• If we have multiple SSID then :

Mbssid under the radio interface and mbssid guest-mode under SSID config section
Dot11 mbssid under the global config section and mbssid guest-mode under the SSID config section

Just few things:

• I have a DHCP server config on my Cisco Switch in VLAN 101.
• Vlan 100 is for management.

Let’s start with the configuration:

Fist switch side configuration for this AP is:

int fa 0/15
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101

 Step1: Configure the SSID and map to a VLAN

Config t
 Dot11 ssid data1
 Vlan 101
 Authentication open
 Authentication key-management wpa version 1
 wpa-psk ascii cisco123
 Guest-mode ------> To broadcast the SSID
 end

 Step2: Configure the radio and Ethernet interface

Interface dot11Radio0
  ssid data1----->Mapping the SSID to Radio Interface
  exit
 !
 Interface dot11Radio0.100
  encapsulation dot1Q 80
 !
 Interface dot11Radio0.101
  encapsulation dot1Q 101
  bridge-group 101
  exit
 !
 int fa 0.100
  encapsulation dot1Q 100
 !
 Interface fa0.101
  encapsulation dot1Q 101
  bridge-group 101
 exit

Step3: Assign encryption (if wpa or wpa2 types is used) to SSIDs with VLAN

Int dot11Radio0
 encryption vlan 101 mode ciphers tkip

Step4: Configure AP for management

Int BVI1
Ip address 10.35.100.250 255.255.255.0
 !
Ip default-gateway 10.35.100.254

Step5: To verify the results:

1. Sh ip int br

ap#sh ip int brief
 Interface                  IP-Address      OK? Method Status                Protocol
 BVI1                       10.35.100.250    YES manual up                    up
 Dot11Radio0                unassigned      YES unset  up                    up
 Dot11Radio0.100             unassigned      YES unset  up                    up
 Dot11Radio0.101             unassigned      YES unset  up                    up
 Dot11Radio1                unassigned      YES unset  administratively down down
 FastEthernet0              unassigned      YES other  up                    up
 FastEthernet0.100           unassigned      YES unset  up                    up
 FastEthernet0.101           unassigned      YES unset  up                    up
  

2. Sh dot11 associations

ap#sh dot11 associations
 802.11 Client Stations on Dot11Radio0:
 SSID [data1] 
 MAC Address    IP address      Device        Name            Parent         State
 5426.963e.4bee 10.35.101.251    unknown       -               self           Assoc