No SSID Sbb-Commands

Answered Question
Jun 11th, 2007
User Badges:

Hi everyone,


since I have problem configuring my Wireless using SDM (I have posted on that), I tried to configure it in command line and after I give a SSID to a Wireless Interface, I try to enable security but there is no commands allowed. Here is the output of what I tried :

Rt_Marsolais#conf t

Rt_Marsolais(config)#int dot11Radio 0/3/0

Rt_Marsolais(config-if)#ssid Test

Rt_Marsolais(config-if-ssid)#?

ssid configuration commands:


Rt_Marsolais(config-if-ssid)#exit

.


So it's like there are no commands disponible at this point. I seriously don't get this one.


If someone as a clue.



Thank you


Correct Answer by Rob Huffman about 9 years 11 months ago

Hi Gabriel,


Just to add a note to Matts great help (5 points for your work here Matt!)


The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;


guest-mode (SSID configuration mode)


Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.


[no] guest-mode


The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.


Examples


This example shows how to set the wireless LAN for the specified SSID into guest mode:


(config-if-ssid)# guest-mode



This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):


(config-if-ssid)# no guest-mode


From this IOS Command doc;


http://www.cisco.com/en/US/products/hw/routers/ps272/products_technical_reference_chapter09186a008022e0e3.html#wp2641711



Hope this helps!

Rob


Correct Answer by Matthew Fowler about 9 years 11 months ago

Hi,


The commands are there, they just don't show up.


Here is a basic sample config for ISRs that I put together:


Router>enable

Router#configure terminal


--Enable Integrated Routing and Bridging--

Router(config)#bridge irb


--Configure bridge group 1 for routing--

Router(config)#bridge 1 protocol ieee

Router(config)#bridge 1 route ip


--Move VLAN1 config to BVI1 (will need to be connected via console)--

Router(config)#interface vlan 1

Router(config-if)#no ip address

Router(config-if)#no ip nat inside

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#interface bvi 1

Router(config-if)#ip address

Router(config-if)#ip nat inside

Router(config-if)#exit


--Configure Wireless--

Router(config)#interface dot11radio 0

Router(config-if)#encryption mode cipher tkip

Router(config-if)#ssid

Router(config-if-ssid)#authentication open

Router(config-if-ssid)#authentication key-management wpa

Router(config-if-ssid)#wpa-psk ascii

Router(config-if-ssid)#guest-mode

Router(config-if-ssid)#exit

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled


Router(config-if)#no shutdown



This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.


Matt.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Correct Answer
Matthew Fowler Mon, 06/11/2007 - 20:47
User Badges:
  • Cisco Employee,

Hi,


The commands are there, they just don't show up.


Here is a basic sample config for ISRs that I put together:


Router>enable

Router#configure terminal


--Enable Integrated Routing and Bridging--

Router(config)#bridge irb


--Configure bridge group 1 for routing--

Router(config)#bridge 1 protocol ieee

Router(config)#bridge 1 route ip


--Move VLAN1 config to BVI1 (will need to be connected via console)--

Router(config)#interface vlan 1

Router(config-if)#no ip address

Router(config-if)#no ip nat inside

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#interface bvi 1

Router(config-if)#ip address

Router(config-if)#ip nat inside

Router(config-if)#exit


--Configure Wireless--

Router(config)#interface dot11radio 0

Router(config-if)#encryption mode cipher tkip

Router(config-if)#ssid

Router(config-if-ssid)#authentication open

Router(config-if-ssid)#authentication key-management wpa

Router(config-if-ssid)#wpa-psk ascii

Router(config-if-ssid)#guest-mode

Router(config-if-ssid)#exit

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled


Router(config-if)#no shutdown



This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.


Matt.

g.lacoursiere Tue, 06/12/2007 - 10:07
User Badges:

Thnk you very much. The command you gave me , solve my probleme and allowed me to use my Wireless. The litlle thing I don't understand stiil, is that on an other router, a Cisco 1812, I can see those commands when I type ?, under ssid config. Anyway, the wireless is working fine now.


A little thing that you could help me with, is the command to stop brodcasting the SSID?


Thank you again.


Correct Answer
Rob Huffman Tue, 06/12/2007 - 11:21
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 IP Telephony, Unified Communications

Hi Gabriel,


Just to add a note to Matts great help (5 points for your work here Matt!)


The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;


guest-mode (SSID configuration mode)


Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.


[no] guest-mode


The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.


Examples


This example shows how to set the wireless LAN for the specified SSID into guest mode:


(config-if-ssid)# guest-mode



This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):


(config-if-ssid)# no guest-mode


From this IOS Command doc;


http://www.cisco.com/en/US/products/hw/routers/ps272/products_technical_reference_chapter09186a008022e0e3.html#wp2641711



Hope this helps!

Rob


Actions

This Discussion

 

 

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode