cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
517
Views
0
Helpful
3
Replies

wireless vlans/ssids

gregthornton1
Level 1
Level 1

I'm trying to setup a 1131 AP with three different ssids corresponding to three separate vlans.  I feel I'm close to completing this but I can't seem to get all three online at the same time.  ssid MickeyMouse seems to always be active and functioning properly.  But when I issue the command mbssid guest-mode, that ssid becomes active and the 3rd doesn't show up.  I would like to have MickeyMouse and MinnieMouse active for internal use, and Visitor to be for guests/vendors, thus only able to get out to the internet.  How can I get all three ssids operational?  Then I'll just need to add them to broadcast out on the other radio also.  Here is my current (edited) config.  Thanks for any assistance

 

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname HOME-AP-01
!
enable secret 5 $1$C3Dr$CG4zHGcd/67zBATjOPygh0
!
no aaa new-model
!
!
!
dot11 ssid MickeyMouse
   vlan 200
   authentication open
   authentication key-management wpa version 2
   wpa-psk ascii 7 0805434008150133070807
!
dot11 ssid MinnieMouse
   vlan 220
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 15360A05172F32003D303E
!
dot11 ssid Visitor
   vlan 222
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 063C06316F410D1C544343595B
!
power inline negotiation prestandard source
!
!
username Cisco password 7 112A1016141D
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption mode ciphers aes-ccm
 !
 encryption vlan 200 mode ciphers aes-ccm
 !
 encryption vlan 220 mode ciphers aes-ccm
 !
 encryption vlan 222 mode ciphers aes-ccm
 !
 ssid MickeyMouse
 !
 ssid MinnieMouse
 !
 ssid Visitor
 !
 station-role root
!
interface Dot11Radio0.200
 encapsulation dot1Q 200 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.220
 encapsulation dot1Q 220
 no ip route-cache
!
interface Dot11Radio0.222
 encapsulation dot1Q 222
 no ip route-cache
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 dfs band 3 block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.200
 encapsulation dot1Q 200 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.220
 encapsulation dot1Q 220
 no ip route-cache
!
interface FastEthernet0.222
 encapsulation dot1Q 222
 no ip route-cache
!
interface BVI1
 description LAN interface
 ip address 192.168.200.12 255.255.255.0
 no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
!
end

3 Replies 3

Saurav Lodh
Level 7
Level 7
  • Enable the broadcast service set identifier (SSID) on the WLAN—With the broadcast SSID enabled, the WLAN/SSID information is sent in the beacons. This also help the clients that perform passive scans (those that do not transmit probe request), as well as clients configured without an SSID to associate with the WLC through this WLAN.
  • Also check the Signal strength

kaaftab
Level 4
Level 4

check the step by step guide for configuring multiple SSID in autonomous AP

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-3_7_JA/configuration/guide/i1237sc/s37ssid.html

Thanks for the replies.  All my work has been through the cli, but I went into the gui to confirm things like in your link, and when I go under Security->SSID Manager, there are no SSIDs listed.  Not even the < NEW > is listed.  

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: