08-01-2013 03:03 AM - edited 03-07-2019 02:42 PM
Hi
I work for a company that has about 15 of these AP's in a warehouse. Currently there is one SSID running with WEP (not great i know) and unfortunately, someone has managed to get hold of the WEP password and it has become common knowledge so people are connecting to it with other devices etc. I have been tasked with setting up a new SSID and password on the device, without touching the current one. Once we have moved over our scanners to the new SSID and password, we can remove the old SSID and password setup. On the test device I have, I can set a new SSID up but I am unable to have a different WEP key without it interferring with the current SSID. Without using VLAN's, is it possible to set two SSID's and a different WEP key for each? I have suggested using the wireless A and setting it up from there, which i did do successfully but the scanners do not work with it so it has to be wireless G only.
Thanks
Stuart
Solved! Go to Solution.
08-06-2013 04:45 AM
Stuart,
I see the problem now. Sorry for sending you on a goose chase...
The problem is that you are using wep with no vlans. The reason that Rafael's solution would work is because the password is set under the ssid, so applying the ssid to the radio separates the password per ssid. The wep solution doesn't allow you to create a password under the ssid, but instead it's configured under the radio. There's not a way that I can see to attach an ssid to a certain wep key. If you had a single ssid, you can rotate keys but this isn't what you're wanting. The only other sure way that you'd be able to get this to work is to create vlans and then separate the ssids per vlan.
HTH,
John
*** Please rate all useful posts ***
08-01-2013 03:17 AM
Without using VLAN's, is it possible to set two SSID's and a different WEP key for each?
Yes.
08-01-2013 03:29 AM
Should I have put, if so, how..?
08-01-2013 03:35 AM
Hi
What is controlling the AP's, it is a WLC or are they Autonomous?
Thanks
08-01-2013 03:38 AM
Hi devils_advocate
They are autonomous.
Thanks
Stuart
08-01-2013 10:57 AM
Hi Stuart,
Look the example:
!
! No configuration change since last restart
!
dot11 syslog
!
dot11 ssid SSID_ONE
authentication open
authentication key-management wpa
wpa-psk ascii 7 01010101010101010101010101010101
!
dot11 ssid SSID_TWO
authentication open
authentication key-management wpa
wpa-psk ascii 7 01010101010101010101010101010101
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
!
encryption mode ciphers tkip
!
broadcast-key change 86400
!
!
ssid SSID_ONE
!
ssid SSID_TWO
!
antenna gain 128
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
!
!
Regards.
08-05-2013 01:48 AM
Hi Rafael
Thanks for your response. The answer you have provided has WPA encryption but I require an answer for WEP. WEP seems to have 4 different boxes in the GUI but I dont seem to able to set 1 password for each.
Thanks
Stuart
08-05-2013 04:32 AM
I don't believe you have the option of doing this through the gui. You'll need to configure it via cli. A word of note though would be that you cannot mix different encryptions on the same vlan. If you ever decide to switch over to wpa/wpa2, you'll need to create a vlan in order to put a different encryption/ssid on the radio. In this case, you're using the same encryption on a different ssid so it should be allowed.
HTH,
John
*** Please rate all useful posts ***
08-05-2013 09:08 AM
Hi John
Do you have a working example as i know that the way WEP works is with transmit keys etc
Thanks
Stuart
08-05-2013 09:11 AM
Take a look at this post:
https://supportforums.cisco.com/thread/326782
HTH,
John
*** Please rate all useful posts ***
08-06-2013 02:39 AM
Hi John
Thanks for your reply. Unfortunately, that post isnt particulary helpful as both the links provided in it no longer work.
Thanks
Stuart
08-06-2013 04:45 AM
Stuart,
I see the problem now. Sorry for sending you on a goose chase...
The problem is that you are using wep with no vlans. The reason that Rafael's solution would work is because the password is set under the ssid, so applying the ssid to the radio separates the password per ssid. The wep solution doesn't allow you to create a password under the ssid, but instead it's configured under the radio. There's not a way that I can see to attach an ssid to a certain wep key. If you had a single ssid, you can rotate keys but this isn't what you're wanting. The only other sure way that you'd be able to get this to work is to create vlans and then separate the ssids per vlan.
HTH,
John
*** Please rate all useful posts ***
08-06-2013 05:16 AM
Hi John
Thanks for the information. Back to the drawing board!
Cheers
Stuart
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide