Two ssids in one Dot11Radio interface

[Mich El]

Hello,

Whilst configuring CISCO867-W router I have encoutered the following problem.

On built-in access point I have one Dot11Radio interface. Is it possible to have two ssids associated with two different vlans on one interface? If yes, how to do it? If no, is there any solution to have two separated wlans on an access-point with one Dot11Radio?

[maldehne]

Of course you can have two wlans associated with two different vlans on the same radio interface.

Here is a simple example on how to it?

on the router the most important thing you have to make sure that the interface

Wlan-GigabitEthernet0 is configured as trunk and allowing the vlans mapped on the ssids defined under the radio interface of the embedded AP. Also you have to make sure that dhcp pools have been defined for both vlans.

Assuming that you have two ssids:

ssid1 & ssid2  mapped to vlans 1 and 2 consecutively. vlan 1 has been defined as the native on the trunk defined on

Wlan-GigabitEthernet0

AP(config)#dot11 ssid ssid1

                #authentication open

                #vlan 1

               #exit

AP(config)#dot11 ssid ssid2

               #authentication open

               #vlan 2

               #exit

AP(config)#interface dot11radio 0

              #ssid ssid1

              #ssid ssid2

              # no shut

              # exit

AP(config)#int dot11radio 0.1

               #encapsulation dot1q 1 native

               #bridge-group 1

               #exit

AP(config)#int dot11radio 0.2

               #encapsulation dot1q 2

               #bridge-group 2

               #exit

AP(config)#int gig 0.1

               #encapsulation dot1q 1 native

               #bridge-group 1

               #exit

AP(config)#int gig  0.2

               #encapsulation dot1q 2

               #bridge-group 2

               #exit

-------------------------------------------------------------------------------------------------------------------------

Please Don't forget to mark the question as answered once having the right response

[rdvorak]

Hi,

- the subnet for interface Vlan26 should be 255.255.255.224 and not 255.255.255.252

- change interface d0 config "encryption mode ciphers aes-ccm" to "encryption vlan 1 mode ciphers aes-ccm"

- to allow more then one guest ssid on the same radio config "mbssid" on radio 0 and config "mbssid guest" on both ssids

Kind regards,

Ron

[maldehne · Accepted solution]

- interface vlan 26 subnet mask is not correct

- one more thing the BVI 1 interface on the embeded AP should be assigned an ip address from the range of VLAN1 which is the native vlan on wlan-gig0 interface.

- the encryption should get linked to the vlan id

"encryption vlan .... mode ciphers tkip " for example

-in order to allow more than one ssid to be broadcasted in beacon frames you should try the following:

dot11 ssid .......

mbssid guest-mode

You do the above for each ssid to be broadcasted

int d.....

mbssid

-----------------------------------------------------------------------------------

Please Don't forget to rate correct answers