I have a question for wireless networking engineers
It's known that SSID supports only one vlan
but is there any way to make a single SSID have multiple Vlans?
This will be needed in the case of when a company have multiple departments, each departments is assigned to a different vlan, and we need all of these departments use the same SSID.
I've read about a similar case in which we can use a radius server which is needed to authenticate users and assign them to their vlans based on their authentication. But will this allow the SSID to have multiple vlans as the same time? I mean will this make 3 users from 3 different vlans for example to use the same SSID and connect to the wireless network simultaneously?
Thanks in advance
I mean when a manager is already connected to VLAN 100 can an engineer connect to VLAN 200 using the same SSID without affecting the managers?
And can this be achieve for more than 2 departments? Consider the company have 20 deps. in 20 different VLANs can all of them use the same SSID?
Yes managers won't be disconnected. And definitely it will work 20 VLANs as well as for 2.
But I point again on the major thing - it will be 802.1X auth, so clients should understand how to use it. You won't be able use usual WPA2-PSK method - keep this in mind, because you have to tell somehow to ACS that you're "manager" or you're "engineer" and it's done by entering username/password or certificates.
"Consider the company have 20 deps. in 20 different VLANs can all of them use the same SSID?"
Yes, if there is dynamic vlan assignment on the authentication server. You associate the SSID to the management interface, and then trunk 20 dynamic interfaces to the wlc. The authentication server passes the interface name back to the WLC which maps clients to different vlans on the wired network.
Another way to have people on different subnets using the same SSID is to configure access points into different AP Groups which are linked to different subnets, that is doing it on a per AP basis rather than per user basis.