cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
576
Views
0
Helpful
5
Replies

Adding Second SSID on 1811w

mahesh18
Level 6
Level 6

Hi everyone,

Cisco1811w is working fine with single ssid 

I need to add second wifi subnet for some users i created the dhcp pool and created second ssid 

but it is not advertising ssid maheshinternet.

Here is config

1811w#show run
Building configuration...

Current configuration : 6394 bytes
!
version 12.4
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname 1811w
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 4096 informational
enable secret 5 $1$V64B$SLV8.k.cAywBlMhT2ECZX.
!
aaa new-model
!
!
aaa authentication login MP none
!
!
aaa session-id common
clock timezone MST -7
clock summer-time MST recurring
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1356976622
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1356976622
revocation-check none
rsakeypair TP-self-signed-1356976622
!
!
crypto pki certificate chain TP-self-signed-1356976622
certificate self-signed 01
3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31333536 39373636 3232301E 170D3136 30333131 30313239
33345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 33353639
37363632 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BC72 C360794B DF54C0D2 BC93C62A E99B9CFC BD30236D 4521AA9F ECD64C1E
C8B5718E 8B3075A8 26DEBBA0 DCC8DC4C E31F4F40 C75411AD 668A862C 11C36B1E
B49D34C3 18880198 F641FA2A 11DEA434 B767CC53 1B4BD63F 3456942F DAF6EEC9
549FF774 675D5777 524A770D D92A41C6 541962C2 C86430D6 9582FA49 6EFF5EAF
5BAD0203 010001A3 65306330 0F060355 1D130101 FF040530 030101FF 30100603
551D1104 09300782 05313831 3177301F 0603551D 23041830 16801496 11D82322
7EE18A60 8265F9E4 25DEEA84 3BE4CD30 1D060355 1D0E0416 04149611 D823227E
E18A6082 65F9E425 DEEA843B E4CD300D 06092A86 4886F70D 01010405 00038181
00121484 6473444A D6C4BCDA 4919907C 2E0962E8 E3FA14CC 298C1E6D C23B0358
A5DB790D C7F306EE 58932E8E E100A349 4E2067FE 1C374D3E 0B5FB0F6 45DCD278
8A680404 BC9F1AEB 336B8462 3FF69841 87B117B2 B9D34674 8532DD18 EB429FD7
C7B7F030 1A62FE65 917E5836 1D072652 7C39B107 FCC3D235 BDC09BE1 C199F5AB 3F
quit
dot11 syslog
!
dot11 ssid ACDinternet
vlan 98
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 0715205D1F5B0E160F
!
dot11 ssid MAHESHINTERNE
!
dot11 ssid MAHESHINTERNET
vlan 198
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 1223040643591B1732
!
ip source-route
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.255.1
!
ip dhcp pool vlan1
import all
network 192.168.97.0 255.255.255.0
default-router 192.168.97.1
dns-server 64.59.144.19
lease 3
!
ip dhcp pool WiFi_Pool_Private
import all
network 192.168.255.0 255.255.255.128
domain-name secure.wless.IPfield.net
dns-server 64.59.135.133
default-router 192.168.255.1
!
ip dhcp pool PA_INLINE
import all
network 192.168.150.0 255.255.255.0
domain-name secure.wless.IPfield.net
dns-server 64.59.135.133
default-router 192.168.150.1
!
!
ip cef
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username mintoo privilege 15 password 7 0506070137494B1B
username test secret 5 $1$sS8s$RYRMPnSHP2ED1kU6ohEgP1
!
!
!
archive
log config
hidekeys
!
!
ip ssh version 2
bridge irb
!
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 98 mode ciphers tkip
!
ssid ACDinternet
!
countermeasure tkip hold-time 0
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.1
!
interface Dot11Radio0.98
encapsulation dot1Q 98
no cdp enable
bridge-group 98
bridge-group 98 subscriber-loop-control
bridge-group 98 spanning-disabled
bridge-group 98 block-unknown-source
no bridge-group 98 source-learning
no bridge-group 98 unicast-flooding
!
interface Dot11Radio0.198
encapsulation dot1Q 198 native
no cdp enable
bridge-group 198
bridge-group 198 subscriber-loop-control
bridge-group 198 spanning-disabled
bridge-group 198 block-unknown-source
no bridge-group 198 source-learning
no bridge-group 198 unicast-flooding
!
interface Dot11Radio1
no ip address
!
encryption vlan 198 mode ciphers tkip
!
ssid MAHESHINTERNE
!
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
!
interface FastEthernet0
description Connection To Palo Alto Eth1/2
ip address 172.16.0.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
description Connection to HP PC 192.168.97.2
spanning-tree portfast
!
interface FastEthernet6
switchport access vlan 98
!
interface FastEthernet7
spanning-tree portfast
!
interface FastEthernet8
!
interface FastEthernet9
!
interface Vlan1
description Wired connections
ip address 192.168.97.1 255.255.255.0
!
interface Vlan98
no ip address
bridge-group 98
bridge-group 98 spanning-disabled
!
interface Vlan198
no ip address
bridge-group 198
bridge-group 198 spanning-disabled
!
interface Async1
no ip address
encapsulation slip
!
interface BVI98
description Private Access
ip address 192.168.255.1 255.255.255.128
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface BVI198
description Private Access
ip address 192.168.150.1 255.255.255.0
ip virtual-reassembly
ip tcp adjust-mss 1452
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 172.16.0.1
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
!
ip access-list standard permit_telnet_ssh
permit 192.168.255.0 0.0.0.255 log
deny any log
!
!
!
!
!
!
!
control-plane
!
bridge 98 protocol ieee
bridge 98 route ip
bridge 198 protocol ieee
bridge 198 route ip
!
line con 0
privilege level 15
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
access-class permit_telnet_ssh in
exec-timeout 900 0
privilege level 15
login authentication MP
transport input all
transport output ssh
line vty 5 15
access-class permit_telnet_ssh in
exec-timeout 900 0
privilege level 15
login authentication MP
transport input all
transport output ssh
!
ntp logging
ntp source FastEthernet0
ntp server 136.159.2.1
ntp server 136.159.2.4
end

Regards

Mahesh

2 Accepted Solutions

Accepted Solutions

MUQ_1899_
Level 1
Level 1

Add the command "dot11 mbssid" globally and under the SSID's config change "guest-mode" to "mbssid guest-mode".

View solution in original post

interface Dot11Radio0

encryption vlan 198 mode ciphers tkip

ssid MAHESHINTERNE

!

interface Dot11Radio1.198
encapsulation dot1Q 198 native
no cdp enable
bridge-group 198
bridge-group 198 subscriber-loop-control
bridge-group 198 spanning-disabled
bridge-group 198 block-unknown-source
no bridge-group 198 source-learning
no bridge-group 198 unicast-flooding

View solution in original post

5 Replies 5

MUQ_1899_
Level 1
Level 1

Add the command "dot11 mbssid" globally and under the SSID's config change "guest-mode" to "mbssid guest-mode".

did that still does not see second ssid.

interface Dot11Radio0

encryption vlan 198 mode ciphers tkip

ssid MAHESHINTERNE

!

interface Dot11Radio1.198
encapsulation dot1Q 198 native
no cdp enable
bridge-group 198
bridge-group 198 subscriber-loop-control
bridge-group 198 spanning-disabled
bridge-group 198 block-unknown-source
no bridge-group 198 source-learning
no bridge-group 198 unicast-flooding

Yes adding above command did the magic.

Can you please explain me the meaning of commands which you told me?

Regards

Mahesh

"dot11 mbssid" - enable the possibility to configure multiple SSIDs on the radios

The other commands enable the SSID itself, the vlan and the encryption alogrithm on a particular radio interface.

Review Cisco Networking for a $25 gift card