Re: Cisco 1252 Multiple SSID and WPA needed

danpiramir3 · ‎12-17-2010

We are getting ready to role out some new AP and are having some issues with the multiple SSID's. We setup the first SSID to be WPA2-Enterprise (with RADIUS) and that is working. Then we go to setup a second SSID with WPA2-PSK but it does not seem to be able to obtain an IP or authenticate. Is the issue with the VLANs? Any assistance would be appreciated. We also set this all up via GUI.

jdchandler-hca · ‎12-17-2010

autonoumous IOS APs each SSID has to be map to different wired side VLANs. I've never used the GUI but here's an example using vlan 22 and vlan 28 using cli commands

dot11 ssid wpa-enterprise
   vlan 22
   authentication open eap eap-methods
   authentication key-management wpa

dot11 ssid wpa-psk
vlan 28
    authentication open
    authentication key-management wpa
    wpa-psk ascii 0 pskkey123

interface dot11Radio0
encryption vlan 22 mode ciphers tkip
ssid wpa-enterprise
broadcast-key vlan 22 change 3600
encryption vlan 28 mode ciphers tkip
ssid wpa-psk

interface Dot11Radio0.22
encapsulation dot1Q 22
service-policy output COS_4
no ip route-cache
no cdp enable
bridge-group 22
bridge-group 22 subscriber-loop-control
bridge-group 22 block-unknown-source
no bridge-group 22 source-learning
no bridge-group 22 unicast-flooding
bridge-group 22 spanning-disabled

interface Dot11Radio0.28
encapsulation dot1Q 28
service-policy output COS_3
no ip route-cache
no cdp enable
bridge-group 28
bridge-group 28 subscriber-loop-control
bridge-group 28 block-unknown-source
no bridge-group 28 source-learning
no bridge-group 28 unicast-flooding
bridge-group 28 spanning-disabled

interface FastEthernet0.22
encapsulation dot1Q 22
service-policy output COS_4
no ip route-cache
bridge-group 22
no bridge-group 22 source-learning

interface FastEthernet0.28
encapsulation dot1Q 28
service-policy output COS_3
no ip route-cache
bridge-group 28
no bridge-group 28 source-learning
bridge-group 28 spanning-disabled

danpiramir3 · ‎12-20-2010

It appears that the settings I used were good but now the issue is related to the "native" setting. The device seems to only allow for one "native" vlan so how do we get the second SSID to work? Is this a switch setting or something that we need configured on the AP itself? Thanks in advance!