Configuring Radio Interface
interface Dot11Radio0
ssid SSID-NAME – Assigning SSID in interface
encryption mode ciphers aes-ccm – Set the encryption
encryption vlan 1 mode ciphers aes-ccm – Configure the encryption for vlan
Configuring Radio sub interface
interface Dot11Radio0.1 – To create sub interface
encapsulation dot1Q 1 native – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)
Configuring Radio sub interface
interface Dot11Radio1.1 – To create sub interface
encapsulation dot1Q 1 native – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)
Configuring Ethernet interface
interface GigabitEthernet0.1 – To create sub interface
encapsulation dot1Q 1 native – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)
Configuring SSID
dot11 ssid SSID-NAME
vlan 1 – Configure the vlan, as ssid must have vlan to broadcast ssid
authentication open – Setting authentication for ssid, if needed for wpa then configure after this command.
authentication key-management wpa version 2 – Once the authentication is set then you can configure this, encryption mode for vlan 1 must be configured in radio interface.
wpa-psk ascii 12345678 – To configure the key
guest-mode – To broadcast ssid
Key Points
Switchport configuration can be either trunk or access, if it is trunk then native vlan will be used to get the IP Addresess.
For multiple ssid you just need to replace the guest-mode with mbssid guest-mode and mbssid command must be added in radio interface (dot0/dot1)
