Assign different network addresses to SSID

[Ed Lo]

Hi,

I have 2 SSID broadcasting from the same radio. Can I have them have their own network address so that the different SSID can ping to each other. And is it possible to set them so that people connected to it have different levels of access?

Thank you

Below is the current config:

Current configuration : 3588 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ap
!
!
no aaa new-model
!
!
dot11 syslog
!
dot11 ssid batman
vlan 2
mbssid guest-mode
!
dot11 ssid robin
vlan 3
mbssid guest-mode
!
!
!
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid batman
!
ssid robin
!
antenna gain 0
mbssid
station-role root
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.1
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
!
interface Dot11Radio0.2
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
antenna gain 0
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
line con 0
privilege level 15
login local
no activation-character
line vty 0 4
login local
!
cns dhcp
end

[Julio E. Moisa]

Hi

Yes, you can have 2 SSID with different networks, you need to create VLANs and use a trunk between the AP and the switch, also you need to use a Native VLAN. 

https://supportforums.cisco.com/document/55561/multiple-ssid-multiple-vlans-configuration-example-cisco-aironet-aps

Also you can do that via GUI.

Hope it is useful

:-)

[Ed Lo]

Hi

The router is not connected to a switch so would this still be possible to do?

[Julio E. Moisa]

Hi Ed,

I think it should work if you have vlans to isolate the networks (using a switch), but not sure if there is a possibility enabling the guest mode to have 2 different SSID with different networks without a switch. 

I think the Wireless section could provide an accurate answer:

https://supportforums.cisco.com/community/4931/wireless-mobility