Not able to connect to Guest SSID

[Britto Vimalraj Anthonysamy]

Dear All,

I have a AIR-AP1131AG-E-K9 configured with 2 SSID. i have configured 4 different key for Guest SSID (Vlan 30) but am not able to connect my laptop using any of the key

Can you suggest me 

interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 20 mode wep mandatory
 !
 encryption vlan 30 key 1 size 128bit 7 CE78330C1A841439656A9323F25A
 encryption vlan 30 key 2 size 40bit 7 1ED10A3EC081
 encryption vlan 30 key 3 size 40bit 7 AC64A10F447B transmit-key
 encryption vlan 30 key 4 size 40bit 7 203EC038BBEA
 encryption vlan 30 mode wep mandatory

[Rasika Nayanajith · Accepted solution]

Why do you want to do WEP (no longer secure, can be crack in minutes). Also note that latest client may even not support this method for security reason.

Use WPA2/PSK instead. Refer this link if you want configuration assistance

http://mrncciew.com/2013/03/02/autonomous-ap-with-wpa-psk-security/

HTH

Rasika

**** Pls rate all useful responses ****

[Carlos Leiton]

I totally agree with Rasika.

I would not recommend to use WEP at all, I suggest you to use WPA instead

[Britto Vimalraj Anthonysamy]

Dear ,

With the below config, one of my laptop doesn't connect (see) to Data SSID even i configure manually

Can you suggest me why it is? how to solve the problem

dot11 ssid Data
   vlan 20
   authentication open eap EAP
   authentication network-eap EAP
!
dot11 ssid Guest
   vlan 30
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 002B110B24705B0B5B
!

bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 30 mode ciphers aes-ccm tkip
 !
 ssid Guest
 !
 mbssid
 station-role root
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 !
 encryption vlan 20 mode wep mandatory
 !
 ssid Data
 !
 no dfs band block
 channel dfs
 station-role root

[Carlos Leiton]

Britto,

1) The SSID Data does not have the "guest-mode" therefore the SSID name won't be broadcasted on the beacon frame

2) I am assuming you are not including all the configuration here. The sub-interfaces on the radios for the VLANs are missing.

3) You are still using WEP, why not WPA?

4) Assuming again, your laptop might not be dual-radio, therefore it can't connect to 5Ghz frequency. Can you confirm if your laptop supports both 2.4Ghz and 5Ghz ?