I'm trying to setup a 1131 AP with three different ssids corresponding to three separate vlans. I feel I'm close to completing this but I can't seem to get all three online at the same time. ssid MickeyMouse seems to always be active and functioning properly. But when I issue the command mbssid guest-mode, that ssid becomes active and the 3rd doesn't show up. I would like to have MickeyMouse and MinnieMouse active for internal use, and Visitor to be for guests/vendors, thus only able to get out to the internet. How can I get all three ssids operational? Then I'll just need to add them to broadcast out on the other radio also. Here is my current (edited) config. Thanks for any assistance
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname HOME-AP-01
!
enable secret 5 $1$C3Dr$CG4zHGcd/67zBATjOPygh0
!
no aaa new-model
!
!
!
dot11 ssid MickeyMouse
vlan 200
authentication open
authentication key-management wpa version 2
wpa-psk ascii 7 0805434008150133070807
!
dot11 ssid MinnieMouse
vlan 220
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 15360A05172F32003D303E
!
dot11 ssid Visitor
vlan 222
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 063C06316F410D1C544343595B
!
power inline negotiation prestandard source
!
!
username Cisco password 7 112A1016141D
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 200 mode ciphers aes-ccm
!
encryption vlan 220 mode ciphers aes-ccm
!
encryption vlan 222 mode ciphers aes-ccm
!
ssid MickeyMouse
!
ssid MinnieMouse
!
ssid Visitor
!
station-role root
!
interface Dot11Radio0.200
encapsulation dot1Q 200 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.220
encapsulation dot1Q 220
no ip route-cache
!
interface Dot11Radio0.222
encapsulation dot1Q 222
no ip route-cache
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.200
encapsulation dot1Q 200 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.220
encapsulation dot1Q 220
no ip route-cache
!
interface FastEthernet0.222
encapsulation dot1Q 222
no ip route-cache
!
interface BVI1
description LAN interface
ip address 192.168.200.12 255.255.255.0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
