06-11-2007 01:57 PM - edited 07-03-2021 02:11 PM
Hi everyone,
since I have problem configuring my Wireless using SDM (I have posted on that), I tried to configure it in command line and after I give a SSID to a Wireless Interface, I try to enable security but there is no commands allowed. Here is the output of what I tried :
Rt_Marsolais#conf t
Rt_Marsolais(config)#int dot11Radio 0/3/0
Rt_Marsolais(config-if)#ssid Test
Rt_Marsolais(config-if-ssid)#?
ssid configuration commands:
Rt_Marsolais(config-if-ssid)#exit
.
So it's like there are no commands disponible at this point. I seriously don't get this one.
If someone as a clue.
Thank you
Solved! Go to Solution.
06-11-2007 08:47 PM
Hi,
The commands are there, they just don't show up.
Here is a basic sample config for ISRs that I put together:
Router>enable
Router#configure terminal
--Enable Integrated Routing and Bridging--
Router(config)#bridge irb
--Configure bridge group 1 for routing--
Router(config)#bridge 1 protocol ieee
Router(config)#bridge 1 route ip
--Move VLAN1 config to BVI1 (will need to be connected via console)--
Router(config)#interface vlan 1
Router(config-if)#no ip address
Router(config-if)#no ip nat inside
Router(config-if)#bridge-group 1
Router(config-if)#bridge-group 1 spanning-disabled
Router(config-if)#interface bvi 1
Router(config-if)#ip address
Router(config-if)#ip nat inside
Router(config-if)#exit
--Configure Wireless--
Router(config)#interface dot11radio 0
Router(config-if)#encryption mode cipher tkip
Router(config-if)#ssid
Router(config-if-ssid)#authentication open
Router(config-if-ssid)#authentication key-management wpa
Router(config-if-ssid)#wpa-psk ascii
Router(config-if-ssid)#guest-mode
Router(config-if-ssid)#exit
Router(config-if)#bridge-group 1
Router(config-if)#bridge-group 1 spanning-disabled
Router(config-if)#no shutdown
This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.
Matt.
06-12-2007 11:21 AM
Hi Gabriel,
Just to add a note to Matts great help (5 points for your work here Matt!)
The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;
guest-mode (SSID configuration mode)
Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.
[no] guest-mode
The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.
Examples
This example shows how to set the wireless LAN for the specified SSID into guest mode:
(config-if-ssid)# guest-mode
This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):
(config-if-ssid)# no guest-mode
From this IOS Command doc;
Hope this helps!
Rob
06-11-2007 08:47 PM
Hi,
The commands are there, they just don't show up.
Here is a basic sample config for ISRs that I put together:
Router>enable
Router#configure terminal
--Enable Integrated Routing and Bridging--
Router(config)#bridge irb
--Configure bridge group 1 for routing--
Router(config)#bridge 1 protocol ieee
Router(config)#bridge 1 route ip
--Move VLAN1 config to BVI1 (will need to be connected via console)--
Router(config)#interface vlan 1
Router(config-if)#no ip address
Router(config-if)#no ip nat inside
Router(config-if)#bridge-group 1
Router(config-if)#bridge-group 1 spanning-disabled
Router(config-if)#interface bvi 1
Router(config-if)#ip address
Router(config-if)#ip nat inside
Router(config-if)#exit
--Configure Wireless--
Router(config)#interface dot11radio 0
Router(config-if)#encryption mode cipher tkip
Router(config-if)#ssid
Router(config-if-ssid)#authentication open
Router(config-if-ssid)#authentication key-management wpa
Router(config-if-ssid)#wpa-psk ascii
Router(config-if-ssid)#guest-mode
Router(config-if-ssid)#exit
Router(config-if)#bridge-group 1
Router(config-if)#bridge-group 1 spanning-disabled
Router(config-if)#no shutdown
This is for WPA-TKIP using PSK. You can change it to WPA2 by substituting in aes-ccm for tkip in the 'encryption mode cipher' command. However, for AES you will require 12.4(11)XJ or later.
Matt.
06-12-2007 10:07 AM
Thnk you very much. The command you gave me , solve my probleme and allowed me to use my Wireless. The litlle thing I don't understand stiil, is that on an other router, a Cisco 1812, I can see those commands when I type ?, under ssid config. Anyway, the wireless is working fine now.
A little thing that you could help me with, is the command to stop brodcasting the SSID?
Thank you again.
06-12-2007 11:21 AM
Hi Gabriel,
Just to add a note to Matts great help (5 points for your work here Matt!)
The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;
guest-mode (SSID configuration mode)
Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.
[no] guest-mode
The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.
Examples
This example shows how to set the wireless LAN for the specified SSID into guest mode:
(config-if-ssid)# guest-mode
This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):
(config-if-ssid)# no guest-mode
From this IOS Command doc;
Hope this helps!
Rob
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: