09-16-2007 04:34 PM - edited 07-03-2021 02:37 PM
I'm looking for the command to turn off SSID broadcast on a 1811w router. I would also like to perform MAC address authentication. So far the documentation I've found has been spotty.
09-17-2007 04:37 AM
Hi William,
The command that controls the "Broadcast" of the SSID is "guest mode". Have a look;
guest-mode (SSID configuration mode)
Use the guest-mode SSID configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.
[no] guest-mode
The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.
Examples
This example shows how to set the wireless LAN for the specified SSID into guest mode:
(config-if-ssid)# guest-mode
This example shows how to reset the guest-mode parameter to default values (no broadcast SSID):
(config-if-ssid)# no guest-mode
From this IOS Command doc;
Configure Open with MAC Authentication
In this type of authentication, the wireless client will be allowed to access the WLAN network only if the client's MAC address is under the list of allowed MAC addresses in the authentication server. The AP relays the wireless client device's MAC address to a RADIUS authentication server on your network, and the server checks the address against a list of allowed MAC addresses. MAC-based authentication provides an alternate authentication method for client devices that do not have EAP capability.
Hope this helps!
Rob
09-17-2007 01:47 PM
Yes, your email was very helpful. Thanks.
Quick question: is it possible to combine mac-address authentication with WPA-psk?
01-12-2008 10:58 PM
Hello Rob,
Thank you so much. I have been looking for this command for last two day.
Abu
09-18-2007 05:23 AM
Hi William,
Good stuff!
In Cisco IOS releases 12.3(4)JA and later, you cannot enable both MAC-address authentication and WPA-PSK.
From this doc;
Hope this helps!
Rob
01-11-2008 03:03 AM
Hi is it possible on a 1231 with 12.3(8)JEB?
Thanks
01-11-2008 05:29 AM
Hi David,
This restriction applies to the 1200 Series as well :(
Here is the reference;
Hope this helps!
Rob
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide