cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
774
Views
5
Helpful
3
Replies

No SSID Sbb-Commands

g.lacoursiere
Level 1
Level 1

Hi everyone,

since I have problem configuring my Wireless using SDM (I have posted on that), I tried to configure it in command line and after I give a SSID to a Wireless Interface, I try to enable security but there is no commands allowed. Here is the output of what I tried :

Rt_Marsolais#conf t

Rt_Marsolais(config)#int dot11Radio 0/3/0

Rt_Marsolais(config-if)#ssid Test

Rt_Marsolais(config-if-ssid)#?

ssid configuration commands:

Rt_Marsolais(config-if-ssid)#exit

.

So it's like there are no commands disponible at this point. I seriously don't get this one.

If someone as a clue.

Thank you

2 Accepted Solutions

Accepted Solutions

Matthew Fowler
Level 1
Level 1

Hi,

The commands are there, they just don't show up.

Here is a basic sample config for ISRs that I put together:

Router>enable

Router#configure terminal

--Enable Integrated Routing and Bridging--

Router(config)#bridge irb

--Configure bridge group 1 for routing--

Router(config)#bridge 1 protocol ieee

Router(config)#bridge 1 route ip

--Move VLAN1 config to BVI1 (will need to be connected via console)--

Router(config)#interface vlan 1

Router(config-if)#no ip address

Router(config-if)#no ip nat inside

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#interface bvi 1

Router(config-if)#ip address

Router(config-if)#ip nat inside

Router(config-if)#exit

--Configure Wireless--

Router(config)#interface dot11radio 0

Router(config-if)#encryption mode cipher tkip

Router(config-if)#ssid

Router(config-if-ssid)#authentication open

Router(config-if-ssid)#authentication key-management wpa

Router(config-if-ssid)#wpa-psk ascii

Router(config-if-ssid)#guest-mode

Router(config-if-ssid)#exit

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#no shutdown

This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.

Matt.

View solution in original post

Hi Gabriel,

Just to add a note to Matts great help (5 points for your work here Matt!)

The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;

guest-mode (SSID configuration mode)

Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.

[no] guest-mode

The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.

Examples

This example shows how to set the wireless LAN for the specified SSID into guest mode:

(config-if-ssid)# guest-mode

This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):

(config-if-ssid)# no guest-mode

From this IOS Command doc;

http://www.cisco.com/en/US/products/hw/routers/ps272/products_technical_reference_chapter09186a008022e0e3.html#wp2641711

Hope this helps!

Rob

View solution in original post

3 Replies 3

Matthew Fowler
Level 1
Level 1

Hi,

The commands are there, they just don't show up.

Here is a basic sample config for ISRs that I put together:

Router>enable

Router#configure terminal

--Enable Integrated Routing and Bridging--

Router(config)#bridge irb

--Configure bridge group 1 for routing--

Router(config)#bridge 1 protocol ieee

Router(config)#bridge 1 route ip

--Move VLAN1 config to BVI1 (will need to be connected via console)--

Router(config)#interface vlan 1

Router(config-if)#no ip address

Router(config-if)#no ip nat inside

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#interface bvi 1

Router(config-if)#ip address

Router(config-if)#ip nat inside

Router(config-if)#exit

--Configure Wireless--

Router(config)#interface dot11radio 0

Router(config-if)#encryption mode cipher tkip

Router(config-if)#ssid

Router(config-if-ssid)#authentication open

Router(config-if-ssid)#authentication key-management wpa

Router(config-if-ssid)#wpa-psk ascii

Router(config-if-ssid)#guest-mode

Router(config-if-ssid)#exit

Router(config-if)#bridge-group 1

Router(config-if)#bridge-group 1 spanning-disabled

Router(config-if)#no shutdown

This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.

Matt.

Thnk you very much. The command you gave me , solve my probleme and allowed me to use my Wireless. The litlle thing I don't understand stiil, is that on an other router, a Cisco 1812, I can see those commands when I type ?, under ssid config. Anyway, the wireless is working fine now.

A little thing that you could help me with, is the command to stop brodcasting the SSID?

Thank you again.

Hi Gabriel,

Just to add a note to Matts great help (5 points for your work here Matt!)

The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;

guest-mode (SSID configuration mode)

Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.

[no] guest-mode

The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.

Examples

This example shows how to set the wireless LAN for the specified SSID into guest mode:

(config-if-ssid)# guest-mode

This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):

(config-if-ssid)# no guest-mode

From this IOS Command doc;

http://www.cisco.com/en/US/products/hw/routers/ps272/products_technical_reference_chapter09186a008022e0e3.html#wp2641711

Hope this helps!

Rob

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: