adding VLAN on AP's

Unanswered Question
Jan 18th, 2008
User Badges:

Hi, i got 5 1242 AP's all up and running (with authentication) but all are running a single VLAN. Please advice where i could get a documentation on implementing multiple VLANs.

i need somehting that can still use my existing authentication for ssid:

authentication open eap eap_methods

authentication network-eap eap_methods

authentication key-management wpa



the switch is configured as switchport access vlan 3

I've used this page but has no authentication documentation:


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
dancampb Fri, 01/18/2008 - 06:37
User Badges:
  • Cisco Employee,

To setup VLANs on the AP all you need to do is create subinterfaces on the radio and fast ethernet interfaces. Make sure to configure them with the encapsulation dot1q... statement and assign them to bridge groups.

Next add the vlan argument to the encryption statements (encryption vlan 3 mode...).

Finally assign the ssid to the VLAN.

dot11 ssid test

vlan 3


David Niemann Tue, 01/22/2008 - 07:01
User Badges:

I have a related question. We use 802.1x for wired port authentication and have a number of VLANs. Is there a way to dynamically add the VLANs and bridge groups? I think I had stumbled across a limitation of about 8 statically configured VLANs. These APs are running in autonomous mode also. I would like to make all of our VLANs available wirelessly so that users can retain their correct VLAN no matter where or how they are connected as the VLANs correspond to firewall exceptions.


This Discussion



Trending Topics - Security & Network