Guest SSID on a dynamic VLAN (AP1230 with IAS) environment

Unanswered Question
May 25th, 2007

Hi all,

I got the following situation:

- AP 1230 PEAP-WEP-Auth.

- XP (SP2) Client


The dynamic vlan assignement/authentication is working (with one SSID). When I configure a second (guest) SSID, there is no longer possible to get connected with one of the dynamic VLAN (authentication with the RADIUS is working, but no access to the VLAN).

I read an old posting that there is an issue with more than one SSID when using dynamic vlan.


The goal is to prvide an SSID for public/guest access and another SSID for dynamic assignement.

Any ideas?

Thank and greets,


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
fmeetz Fri, 06/01/2007 - 08:15

Try upgarding the firmware verison to 12.3(2)JA2 for this multiple dynamic assignment to work.

ERIC ARMSTRONG Thu, 09/06/2007 - 08:21

Are you using MBSSID to broadcast both networks? If so, there is an incompatibility with MBSSID and Dynamic VLAN assignment.

You need to broadcast only one of the SSIDs (via guest-mode). You can then use the information-element ssidl advertisement feature to inform clients of the additional SSIDs, if required:(

alig.norbert Wed, 09/12/2007 - 07:14

Hi all,

thanks for the reply and sorry for the delay.

Here the working config:

dot11 ssid guest

vlan 104

authentication open


mbssid guest-mode


dot11 ssid private

vlan 102

authentication open eap eap_methods

authentication network-eap eap_methods

interface Dot11Radio0

no ip address

no ip route-cache


encryption vlan 102 mode wep mandatory


ssid guest


ssid private





station-role root




This Discussion



Trending Topics - Security & Network