Introduction
How to configure multiple SSIDs with different encryption on each SSID
Resolution
The Service Set Identifier (SSID) is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple Access Points (AP) on a network or sub-network can use the same SSIDs. SSIDs are case sensitive and can contain up to 32 alphanumeric characters. For more information, refer to the Default SSID Configuration section of Configuring Multiple SSIDs.
Understanding Multiple SSIDs
The SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSIDs. SSIDs are case sensitive and can contain up to 32 alphanumeric characters. Do not include spaces in your SSIDs.
You can configure up to 16 SSIDs on your access point and assign different configuration settings to each SSID. All the SSIDs are active at the same time; that is, client devices can associate to the access point using any of the SSIDs. These are the settings you can assign to each SSID:
- VLAN
- Client authentication method
- Maximum number of client associations using the SSID
- RADIUS accounting for traffic using the SSID
- Guest mode
If you want the access point to allow associations from client devices that do not specify an SSID in their configurations, you can set up a guest SSID. The access point includes the guest SSID in its beacon. However, to keep your network secure, you should disable the guest mode SSID on most access points.
If your network uses VLANs, you can assign one SSID to a VLAN, and client devices using the SSID are grouped in that VLAN
Creating an SSID Globally
In Cisco IOS Release 12.3(2)JA, you can configure SSIDs globally or for a specific radio interface. When you use the dot11 ssid global configuration command to create an SSID, you can use the ssid configuration interface command to assign the SSID to a specific interface.
When an SSID has been created in global configuration mode, the ssid configuration interface command attaches the SSID to the interface but does not enter ssid configuration mode. However, if the SSID has not been created in global configuration mode, the ssid command puts the CLI into SSID configuration mode for the new SSID.
Note
When you create an SSID in global configuration mode, you can assign or change the SSID attributes only in global configuration mode. Similarly, when you create an SSID in configuration interface mode, you can assign or change the SSID attributes only in configuration interface mode.
Beginning in privileged EXEC mode, follow these steps to create an SSID globally. After you create an SSID, you can assign it to specific radio interfaces.
Example
AP# configure terminal
AP(config)# dot11 ssid Test
AP(config-ssid)# accounting accounting-method-list
AP(config-ssid)# max-associations 15
AP(config-ssid)# vlan 3762
AP(config-ssid)# exit
AP(config)# interface dot11radio 0
AP(config-if)# ssid Test
Creating an Interface-Specific SSID
Beginning in privileged EXEC mode, follow these steps to create an SSID for a specific radio interface.
Note
When you create an interface-specific SSID, you cannot change the SSID attributes in global configuration mode.
Example
AP# configure terminalAP(config)# interface dot11radio 0
AP(config-if)# ssid batman
AP(config-ssid)# accounting accounting-method-list
AP(config-ssid)# max-associations 15
AP(config-ssid)# vlan 3762
AP(config-ssid)# end
When you want to configure Multiple SSIDs with different encryption on each SSID, VLANs must be created.
Note:Do not include spaces in SSIDs
Problem Type
Configure / Configuration issues
Products
Access point
Security Options
SSID
SW Features
VLANs
Reference
