topic Terrific! Glad I could help in Wireless

Wireless ssid change

chrisgerke — Mon, 05 Jul 2021 07:37:26 GMT

Previously had an ssid configure as follows;

dot11 ssid MYSSID
vlan MYVLAN
authentication open
guest-mode
!

interface Dot11Radio0
ssid MYSSID
!

But I want to replace it with this;

dot11 ssid MYSSID-NEW
vlan MYVLAN
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 MYPASSWORD
!

The strange thing I am finding is that users connecting to the new SSID are still being prompted with the authentication proxy login page. What am I doing wrong?

Hi chrisgerke The first one I

tsuyoshi-kk — Mon, 07 Apr 2014 02:39:57 GMT

Hi chrisgerke

The first one I would like to ask is, have you change the interface dot11Radio0 to the SSID you changed, MYSSID-NEW?

Secondly, have you added encrytion at interface dot11Radio0?

Please have a look at the following page for AP configuration:

https://supportforums.cisco.com/document/61936/autonomous-ap-and-bridge-basic-configuration-template

Cheers,

I did, I basically ran a

chrisgerke — Mon, 07 Apr 2014 02:55:15 GMT

I did, I basically ran a script like this:

no dot11 ssid MYSSID

interface Dot11Radio0
no ssid MYSSID
!

dot11 ssid MYSSID-NEW
vlan MYVLAN
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 MYPASSWORD
!

interface Dot11Radio0
encryption vlan MYVLAN mode ciphers aes-ccm
!
ssid MYSSID-NEW

My aps connect back to an ACS server so I am guessing I've missed something. With regarding to the http proxy page from the previous config, what actually serves that up?

Are they being presented with

Scott Olsen — Mon, 07 Apr 2014 17:56:53 GMT

Are they being presented with the "authentication proxy login page" after successful association to "MYSSID-NEW" with the new PSK?

If so, what else can you tell us about the this proxy login page? I'm assuming it's some other separate captive web portal operating at layer3. If that's the case, it exists "upstream" of your wireless setup...

Cheers,

Scott

Doh, it was the asa upstream.

chrisgerke — Tue, 08 Apr 2014 02:02:46 GMT

Doh, it was the asa upstream. The aaa authentication match was removed and all is good.

Terrific! Glad I could help

Scott Olsen — Tue, 08 Apr 2014 13:18:37 GMT

Terrific! Glad I could help 🙂