Configuring cisco AIR-SAP2602I-E-K9

[Create Share]

Hi,

We need to configure cisco AIR-SAP2602I-E-K9 for 2 SSIDs. One Domain Users and another for Guests. Vlans are configured in cisco switch. Vlan1 is for Domain Users and Vlan 23 is for Guests. Can we have a simple configuration example?

Thanks.

[Rasika Nayanajith]

Here is a sample configuration of Autonomous AP with two vlans (in this example vlan 10 & vlan 20 for two different SSID and vlan 1 - 192.168.1.0/24 is for management). Modify SSID name & passwords accordingly.

hostname AP-01
!
dot11 ssid <SSID-1>
 vlan 10
 authentication open
 authentication key-management wpa version 2
 mbssid guest-mode
 wpa-psk ascii <SSID-1_PASSWORD>
!
dot11 ssid <SSID-2>
 vlan 20
 authentication open
 authentication key-management wpa version 2
 mbssid guest-mode
 wpa-psk ascii <SSID-2_PASSWORD>
!
interface Dot11Radio0
 encryption vlan 10 mode ciphers aes-ccm
 encryption vlan 20 mode ciphers aes-ccm
 mbssid
 ssid <SSID-1>
 ssid <SSID-2>
 no shut
!
interface Dot11Radio1
 channel width 40-above
 encryption vlan 10 mode ciphers aes-ccm
 encryption vlan 20 mode ciphers aes-ccm
 mbssid
 ssid <SSID-1>
 ssid <SSID-2>
 no shut
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface Dot11Radio0.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 bridge-group 1
!
interface Dot11Radio1.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface Dot11Radio1.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface Dot11Radio1.1
 encapsulation dot1Q 1 native
 bridge-group 1
!
interface GigabitEthernet0.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface GigabitEthernet0.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface GigabitEthernet0.1
 encapsulation dot1Q 1 native
 bridge-group 1
!
interface BVI1
 ip address 192.168.1.100 255.255.255.0
ip default-gateway 192.168.1.1

Switchport config that connect this AP should similar to below

interface GigabitEthernet1/0/41
 Description AP-01
 switchport trunk allowed vlan 1,10,20
 switchport mode trunk
 spanning-tree portfast trunk

HTH

Rasika

*** Pls rate all useful responses ***

[Create Share]

Thanks.

Just one more thing. When I am connecting to the Guest Network, it is taking time identifying the network name as Guest which is actually defined in the DHCP Server which is our firewall? Is there anything we need to do on the Switch or AP side to make it faster?

Thanks. 

[Rasika Nayanajith]

I do not think there is any config on AP/switch making the process faster.

HTH

Rasika

[George Stefanick]

Yiu could always move the guest dhcp to the inside for testing and see if it improves. If it does then yiu know the fw / dhcp server is the delay.