×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Cisco AP's for dual access

Unanswered Question
Oct 30th, 2006
User Badges:

Hi,

Does anybody know if I can do the following with a cisco AP?

I want to have one access point authenticate two different groups of users with radius. The two different groups would be on seperate vlans, so the AP would have to support vlans. Also, I want to have two different ssids for the groups, so the AP would have to support that as well. The problem with this in the past is that you can configure two different ssids, but the beacon can only broadcast one. I would like to have them both discoverable, for ease of setup. If that isn't possible, maybe I could use one ssid, and the radius server could break out the different groups and assign them to the proper vlan? Is that possible?


thanks,

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
irisrios Fri, 11/03/2006 - 13:12
User Badges:
  • Silver, 250 points or more

Here is a link that explains how to configure multiple SSID.


http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a00804e7f4a.html


After reading this link, Try this steps.


1. Click on Services >> VLAN >> Create a VLAN per SSID. Remember that the

native SSID must match on both ends.

2. Click on Security >> Encryption Manager >> Select the VLAN that you want to

use with EAP under Set Encryption Mode and Keys for VLAN. Scroll down to Encryption Modes

and select the CIPHER that you want. Click Apply.

3. Click on Security >> Encryption Manager >> Select the VLAN that you want to

use with wep under Set Encryption Mode and Keys for VLAN. Scroll down to Encryption Modes

and select WEP encryption Mandatory. Click Apply.

4. Click on Security >> SSID Manager >> Create 2 SSID and link them to the

corresponding VLAN. The SSID that is linked to the VLAN that is using CIPHER will be the

one that can be configured with WPA and Key Management mandatory.

5. Select the SSID that you want to broadcast, go to Guest Mode/Infrastructure SSID

Settings and select Multiple BSSID. After that select the SSID again and go to Multple

BSSID Beacon Settings and enable the option that says Set SSID as Guest Mode.

6. Configure server as you wish.


sorvarit Sat, 11/04/2006 - 00:49
User Badges:

You can have multiple vlans with separate ssids for each, but only two ssids can be broadcasted. In your case this would satisfy your needs. The secondary broadcast ssid feature was added in an ios released some versions past.

Actions

This Discussion

 

 

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode