How to disable SSID broadcasting in Cisco Access Point (AP)

Document

Dec 18, 2014 11:28 PM
Jun 22nd, 2009


Introduction

How to disable SSID broadcasting in Cisco Access Point (AP)

Resolution


The concept of broadcast Service Set Identification (SSID) is referred to as Guest mode in IOS. The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more  secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with  the access point. It also allows clients configured without a SSID to associate to Access Point.


To disable SSID broadcasting in Cisco IOS Software

perform these steps:-

1.  Go to the SSID Manager page.

2.  There is a selection for Guest Mode which is probably checked. To stop SSID from being broadcasted, un-check the Guest Mode.


To disable SSID broadcasting in VxWorks

perform these steps:

1.  Go to Setup --> AP Radio Hardware or HW Radio.

2.  Make sure Allow broadcast SSID to associate is not selected. If is it selected, uncheck the option.


The command to dissable the SSID broadcast from CLI is " no guest-mode"

under the interface ssid .Perform these steps to disable SSID broadcast:


1.  AP(config)#interface dot11Radio 0

2.  AP(config-if)#ssid

3.  AP(config-if-ssid)#no guest-mode


For more information on guest-mode (SSID configuration mode), refer to Cisco IOS Commands for Access Points and Bridges:-

For more information on wireless LAN security, refer to the Use of SSID section of Wireless LAN Security White Paper:-

Problem Type

Configure / Configuration issues

Products

Access point

Workgroup bridges

Security Options

SSID

Product OS

IOS

VxWorks

Disabling SSID Broadcast on a Linksys VOIP Router:-

FAQ on Cisco Aironet Wireless Security

Disable the SSID broadcast on a Cisco 1811W

Enabling SSID broadcast on Cisco 871W ISR

Overall Rating: 5 (1 ratings)
johnlloyd_13 Mon, 08/18/2014 - 05:37

hi,

just to add, you could disable SSID broadcast (on autonomous WAP) under ssid config mode:

AP(config)#dot11 ssid 3333
AP(config-ssid)#no mbssid guest-mode
AP(config-ssid)#do sh dot11 bssid
Interface      BSSID         Guest  SSID
Dot11Radio0   003a.9910.xxxx  Yes  1111
Dot11Radio0   003a.9910.yyyy  Yes  2222
Dot11Radio0   003a.9910.zzzz  No  3333

Dani Simanjuntak Thu, 12/18/2014 - 20:39

How about if i use Wireless controller?

johnlloyd_13 Thu, 12/18/2014 - 23:28

hi,

you can disable it under WLANs > click WLAN ID > General > uncheck "Broadcast SSID"

i used a WLC 2504 as an example. see attached pic.

Attachment: 

Actions

Login or Register to take actions

This Document

Posted June 22, 2009 at 5:12 PM
Updated February 29, 2012 at 9:39 AM
Stats:

Related Content

 

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode