Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

How to configure multiple SSIDs with different encryption on each SSID

     

     

    Introduction

    How to configure multiple SSIDs with different encryption on each SSID

    Resolution

    The Service Set Identifier (SSID) is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple Access Points (AP) on a network or sub-network can use the same SSIDs. SSIDs are case sensitive and can contain up to 32 alphanumeric characters. For more information, refer to the Default SSID Configuration section of Configuring Multiple SSIDs.

    Understanding Multiple SSIDs

    The SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSIDs. SSIDs are case sensitive and can contain up to 32 alphanumeric characters. Do not include spaces in your SSIDs.

    You can configure up to 16 SSIDs on your access point and assign different configuration settings to each SSID. All the SSIDs are active at the same time; that is, client devices can associate to the access point using any of the SSIDs. These are the settings you can assign to each SSID:

    • VLAN
    • Client authentication method
    • Maximum number of client associations using the SSID
    • RADIUS accounting for traffic using the SSID
    • Guest mode

    If you want the access point to allow associations from client devices that do not specify an SSID in their configurations, you can set up a guest SSID. The access point includes the guest SSID in its beacon. However, to keep your network secure, you should disable the guest mode SSID on most access points.

    If your network uses VLANs, you can assign one SSID to a VLAN, and client devices using the SSID are grouped in that VLAN

    Creating an SSID Globally

    In Cisco IOS Release 12.3(2)JA, you can configure SSIDs globally or for a specific radio interface. When you use the dot11 ssid global configuration command to create an SSID, you can use the ssid configuration interface command to assign the SSID to a specific interface.

    When an SSID has been created in global configuration mode, the ssid configuration interface command attaches the SSID to the interface but does not enter ssid configuration mode. However, if the SSID has not been created in global configuration mode, the ssid command puts the CLI into SSID configuration mode for the new SSID.

    Note

    When you create an SSID in global configuration mode, you can assign or change the SSID attributes only in global configuration mode. Similarly, when you create an SSID in configuration interface mode, you can assign or change the SSID attributes only in configuration interface mode.

    Beginning in privileged EXEC mode, follow these steps to create an SSID globally. After you create an SSID, you can assign it to specific radio interfaces.

    Example

    AP# configure terminal
    AP(config)# dot11 ssid Test
    AP(config-ssid)# accounting accounting-method-list
    AP(config-ssid)# max-associations 15
    AP(config-ssid)# vlan 3762
    AP(config-ssid)# exit
    AP(config)# interface dot11radio 0
    AP(config-if)# ssid Test

    Creating an Interface-Specific SSID

    Beginning in privileged EXEC mode, follow these steps to create an SSID for a specific radio interface.

    Note

    When you create an interface-specific SSID, you cannot change the SSID attributes in global configuration mode.

    Example

    AP# configure terminalAP(config)# interface dot11radio 0
    AP(config-if)# ssid batman
    AP(config-ssid)# accounting accounting-method-list
    AP(config-ssid)# max-associations 15
    AP(config-ssid)# vlan 3762
    AP(config-ssid)# end

    When you want to configure Multiple SSIDs with different encryption on each SSID, VLANs must be created.

    Note:Do not include spaces in SSIDs

    Problem Type

    Configure / Configuration issues

    Products

    Access point

    Security Options

    SSID

    SW Features

    VLANs

    Reference

    Version history
    Revision #:
    2 of 2
    Last update:
    ‎08-23-2017 08:43 PM
    Updated by:
     
    Contributors
    Comments
    New Member

    Very good write up.  I'm having issues though.  I have 3 vlans,  vlan 99 for management, vlan 160 with wep, and vlan 161 with wpa2.  Users connecting to vlan 161 can get an ip address and connect just fine.  Users in vlan 160 can not connect