10-30-2006 10:30 AM - edited 07-03-2021 01:09 PM
Hi,
Does anybody know if I can do the following with a cisco AP?
I want to have one access point authenticate two different groups of users with radius. The two different groups would be on seperate vlans, so the AP would have to support vlans. Also, I want to have two different ssids for the groups, so the AP would have to support that as well. The problem with this in the past is that you can configure two different ssids, but the beacon can only broadcast one. I would like to have them both discoverable, for ease of setup. If that isn't possible, maybe I could use one ssid, and the radius server could break out the different groups and assign them to the proper vlan? Is that possible?
thanks,
11-03-2006 01:12 PM
Here is a link that explains how to configure multiple SSID.
After reading this link, Try this steps.
1. Click on Services >> VLAN >> Create a VLAN per SSID. Remember that the
native SSID must match on both ends.
2. Click on Security >> Encryption Manager >> Select the VLAN that you want to
use with EAP under Set Encryption Mode and Keys for VLAN. Scroll down to Encryption Modes
and select the CIPHER that you want. Click Apply.
3. Click on Security >> Encryption Manager >> Select the VLAN that you want to
use with wep under Set Encryption Mode and Keys for VLAN. Scroll down to Encryption Modes
and select WEP encryption Mandatory. Click Apply.
4. Click on Security >> SSID Manager >> Create 2 SSID and link them to the
corresponding VLAN. The SSID that is linked to the VLAN that is using CIPHER will be the
one that can be configured with WPA and Key Management mandatory.
5. Select the SSID that you want to broadcast, go to Guest Mode/Infrastructure SSID
Settings and select Multiple BSSID. After that select the SSID again and go to Multple
BSSID Beacon Settings and enable the option that says Set SSID as Guest Mode.
6. Configure server as you wish.
11-04-2006 12:49 AM
You can have multiple vlans with separate ssids for each, but only two ssids can be broadcasted. In your case this would satisfy your needs. The secondary broadcast ssid feature was added in an ios released some versions past.
11-09-2006 06:22 AM
Thanks Guys,
This solves my issue.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide