cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
157208
Views
5
Helpful
5
Comments
TCC_2
Level 10
Level 10

 

 

Introduction

How to disable SSID broadcasting in Cisco Access Point (AP)

 

 

Resolution

 

The concept of broadcast Service Set Identification (SSID) is referred to as Guest mode in IOS. The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more  secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with  the access point. It also allows clients configured without a SSID to associate to Access Point.

 

To disable SSID broadcasting in Cisco IOS Software

perform these steps:-

1.  Go to the SSID Manager page.

2.  There is a selection for Guest Mode which is probably checked. To stop SSID from being broadcasted, un-check the Guest Mode.

 

To disable SSID broadcasting in VxWorks

perform these steps:

1.  Go to Setup --> AP Radio Hardware or HW Radio.

2.  Make sure Allow broadcast SSID to associate is not selected. If is it selected, uncheck the option.

 

The command to dissable the SSID broadcast from CLI is " no guest-mode"

under the interface ssid .Perform these steps to disable SSID broadcast:

 

1.  AP(config)#interface dot11Radio 0

2.  AP(config-if)#ssid

3.  AP(config-if-ssid)#no guest-mode

 

For more information on guest-mode (SSID configuration mode), refer to Cisco IOS Commands for Access Points and Bridges:-

 

For more information on wireless LAN security, refer to the Use of SSID section of Wireless LAN Security White Paper:-

 

 

Problem Type

Configure / Configuration issues

 

Products

Access point

Workgroup bridges

Security Options

SSID

 

Product OS

IOS

VxWorks

 

Related Documents

 

Disabling SSID Broadcast on a Linksys VOIP Router:-

 

FAQ on Cisco Aironet Wireless Security

 

Related Discussion on Cisco Support Community

 

 

 

Disable the SSID broadcast on a Cisco 1811W

 

Enabling SSID broadcast on Cisco 871W ISR

 

Comments
johnlloyd_13
Level 9
Level 9

hi,

just to add, you could disable SSID broadcast (on autonomous WAP) under ssid config mode:

AP(config)#dot11 ssid 3333
AP(config-ssid)#no mbssid guest-mode
AP(config-ssid)#do sh dot11 bssid
Interface      BSSID         Guest  SSID
Dot11Radio0   003a.9910.xxxx  Yes  1111
Dot11Radio0   003a.9910.yyyy  Yes  2222
Dot11Radio0   003a.9910.zzzz  No  3333

How about if i use Wireless controller?

johnlloyd_13
Level 9
Level 9

hi,

you can disable it under WLANs > click WLAN ID > General > uncheck "Broadcast SSID"

i used a WLC 2504 as an example. see attached pic.

Fadi Shaya
Community Member

Hello All, 

I have 2500 WLC with 75 APs, I am using 3 SSID for our locations, Voice, Wifi and Guest each with different Vlan

I want to hide wifi SSID on 5 APs only which is related to my BO. is it possible !! thank you 

Attached is the WLC version

Antropitecus
Level 1
Level 1

I believe so, you should group APs and then apply settings to this particular array...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: