topic multiple AP Groups in Wireless

multiple AP Groups

skelley5000 — Sun, 04 Jul 2021 05:27:01 GMT

I have and will have more multiple sites that are separate offices and will be using HREAP to each location. Each site like I said will be separate but will have the same SSID. I am assuming I will need separate AP groups, virtural interfaces and WLANS for each site?

Re: multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 13:31:12 GMT

First off, if the wlc is centralized and will be supporting all the remote sites, there is only one VIP address configuration on the wlc. The same with the wlan's. The wlan's is the SSID... You would want to have the same WLAN SSID at each site so users from one site can go to another site without having to add a new wireless profile.

AP Groups might not be required. If you plan on having the same SSIDs at each site, you really dont need to use ap groups. When an ap is in h-reap or FlexConnect mode, you define in the ap the vlan mapping. What SSID is mapped to what vlan at that site. If you want to only have certain SSIDs broadcasting at a site, then you use ap groups.

Sent from Cisco Technical Support iPhone App

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 13:47:48 GMT

here is an example, I have a site that I am assigning vlan 111 to the wireless, I assign the interface to that vlan, then also assign the AP's under the H-REAP tab to the same vlan. With out AP groups how do I get the SSID to broadcast on those AP's? then I have a site I will be assigning vlan 112 too, This site will also have the same SSID but different network.

If I am understanding this right, I will need to make an interface for each site because of the different vlans, then once I put the AP's in H-REAP mode I will need to assign them to the correct VLAN and this will broadcast the SSID?

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 13:56:06 GMT

By default, all wlans with wlan id 1-16 will be placed in the dafault-group. This group will have all ssids that you create with wlan id 1-16. So all these will be activeap's will default to the default-group. You have to configure each h-reap/flexconnect ap to assign what wlan ssid you want to map to what vlan at the remote site.

AP Groups:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008073c723.shtml

H-REAP:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc3b8.shtml

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080736123.shtml

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 14:00:02 GMT

What I am trying to avoid is having to create multiple AP groups, I will have multiple sites with the same SSID but will be on different vlans and networks.

multiple AP Groups

Stephen Rodriguez — Tue, 24 Jul 2012 14:02:31 GMT

if you are going to use HREAP for the sites, you don't need to create AP groups, just HREAP groups if you are using 802.1x.

All you need to do is map the appropriate VLAN for the AP at the site.

HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:03:08 GMT

You don't need AP Groups... If your ap's are in h-reap, you need to manually configure each ap. WLAN 1 is mapped to vlan 100, WLAN 2 is mapped to vlan 101, etc. H-REAP is different form AP GRoups....

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 14:08:18 GMT

Well right now we are not using 802.1x, just WPA2 AES. We need to use H-REAP because of the encryption abilities of H-REAP because we are a healthcare provider. We will be moving to 802.1x soon but that could be next year. Since we are not using 802.1x do we need to use AP groups?

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:09:07 GMT

You don't need to use AP Groups.

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:11:35 GMT

Here is a video on h-reap.... this is what you need to do.

http://www.youtube.com/watch?v=oO2W8WQJ8Gs

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 14:13:56 GMT

So basicly, I need to create the WLAN with the correct interface, Create an H-REAP group, place the AP's in the H-REAP group and assign the correct vlan ID on the AP?

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:22:32 GMT

Yup...

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:44:26 GMT

Well... let me explain this... you don't need h-reap groups if your not doing 802.1x. You only need to configure an ap to h-reap/flexconnect mode and then in the h-reap/flexconnect tab on the ap, you assign the native vlan and then hit aplly, then click on vlan mapping and then define what vlan locally will be ties to that wlan. You need to make sure your wlan ssid is configured for h-repa/flexconnect local switching also.

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 14:47:36 GMT

That brings up another question, our AP's are usually on a VLAN different than what the users are on, example the clients network is on vlan 111 and the AP is on 110. So the interface will be on vlan 111, Hreap vlan should be 110?

multiple AP Groups

skelley5000 — Tue, 24 Jul 2012 14:50:42 GMT

I gotcha, also there is no reason for us to use local switching, eveything will be central switching. There are no servers or printing at off site location. If they lose network conenctivity they lose everything anyways.

multiple AP Groups

Scott Fella — Tue, 24 Jul 2012 14:57:03 GMT

If your doing central switching, then your wlan ssid will be tunneled back to the wlc and be placed on vlan 111. The AP's should be on a different vlan, so you have the ap's in each site on vlan 110, that should be fine. This can be an access port vlan 110, since you are not doing any local switching.

multiple AP Groups

skelley5000 — Thu, 26 Jul 2012 14:25:20 GMT

If I create an interface, create a WLAN but don't create an AP group.how does the AP know how to broadcast the correct SSID in H-REAP mode. If the AP is in H-REAP mode, set to the correct VLAN....

multiple AP Groups

Scott Fella — Thu, 26 Jul 2012 14:27:31 GMT

The ap would be in the default-ap group. That will have all your ssid's that you have configured.

multiple AP Groups

skelley5000 — Thu, 26 Jul 2012 15:22:41 GMT

Ok I gotcha ya now, but the problem is each site will be assigned a different VLAN but the same SSID. So an interface will be created for each site with the correct VLAN and then assigned to the approiate AP group? the remote sites will not broadcast what is in the default group.

multiple AP Groups

Scott Fella — Thu, 26 Jul 2012 15:31:33 GMT

It doesn't matter if you use ap groups or not.... AP Groups allow you to define what ssids will be available on which AP. So if you have two ssids, ssid1 for internal and ssid2 for guest, you can just use the default-group. You define in the flexconnect ap, what wlan will be mapped to what vlan at the remote site, when local switching is enabled. If local switching isn't enabled for that wlan ssid, then all traffic gets tunneled back to the WLC.