cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
945
Views
5
Helpful
2
Replies

I want to create Guest wi-fi

wishwan7321
Level 1
Level 1

Hi Team,

 

I want to configure a wifi for people who comes to visit me on a Cisco AP AIR-LAP-1142N-E-K9.

dot11Radio 0 is configured good with wpa password on VLAN 40. 

I am trying to create the guest on VLAN 50, outside the network, but it is not going online.

BTW is in standalone mode and not on a WLC.

Sometimes I get the following message when trying to broadcast the SSID: 

*Feb 16 03:06:45.155: %DOT11-4-NO_SSID_OR_NO_VLAN: No SSID configured. Dot11Radio1 not started.

 

 

Below is the following configuration:

dot11 ssid Contoso-Guests
vlan 50
authentication open
mbssid guest-mode

 

interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 50 mode ciphers tkip
!
ssid Contoso-Guest
!
antenna gain 0
peakdetect
no dfs band block
mbssid
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding

 

 

interface GigabitEthernet0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 spanning-disabled
no bridge-group 50 source-learning

 

Hope that this will be good explained and someone knows the trick.

 

2 Replies 2

Sandeep Choudhary
VIP Alumni
VIP Alumni

Hi,

 

You need to assign SSID under interface, without that Radio interfaces won't come up.

 

Do this change and try again:

 

dot11 ssid Contoso-Guests
vlan 50
authentication open
mbssid guest-mode

 

interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 50 mode ciphers tkip
!
ssid Contoso-Guest

ssid Contoso-Guests
!
antenna gain 0
peakdetect
no dfs band block
mbssid
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding

 

Regards

Dont forget to rate helpful posts

Hi @Sandeep Choudhary 

It is not working.. Here below the configuration:

 

WPA#show running-config

Building configuration...

no aaa new-model

no ip routing

no ip cef

no ip domain lookup

!

!

!

!

dot11 syslog

!

dot11 ssid Contoso-Employees

   vlan 40

   authentication open

   authentication key-management wpa version 2

   guest-mode

   wpa-psk ascii

!

dot11 ssid Contoso-Guest

   vlan 50

   authentication open

   guest-mode

!

!

dot11 guest

!

!

!

username Cisco password

!

!

bridge irb

!

!

!

interface Dot11Radio0

 no ip address

 no ip route-cache

 !

 encryption mode ciphers aes-ccm

 !

 encryption vlan 40 mode ciphers aes-ccm tkip

 !

 ssid Contonso-Employees

 !

 antenna gain 0

 channel 2412

 station-role root

!

interface Dot11Radio0.2

 encapsulation dot1Q 2 native

 no ip route-cache

 bridge-group 1

 bridge-group 1 subscriber-loop-control

 bridge-group 1 spanning-disabled

 bridge-group 1 block-unknown-source

 no bridge-group 1 source-learning

 no bridge-group 1 unicast-flooding

!

interface Dot11Radio0.40

 encapsulation dot1Q 40

 no ip route-cache

 bridge-group 40

 bridge-group 40 subscriber-loop-control

 bridge-group 40 spanning-disabled

 bridge-group 40 block-unknown-source

 no bridge-group 40 source-learning

 no bridge-group 40 unicast-flooding

!

interface Dot11Radio0.50

 encapsulation dot1Q 50

 no ip route-cache

 bridge-group 50

 bridge-group 50 subscriber-loop-control

 bridge-group 50 spanning-disabled

 bridge-group 50 block-unknown-source

 no bridge-group 50 source-learning

 no bridge-group 50 unicast-flooding

!

interface Dot11Radio1

 no ip address

 no ip route-cache

 shutdown

 !

 encryption mode ciphers aes-ccm

 !

 encryption vlan 40 mode ciphers aes-ccm tkip

 !

 ssid Contonso-Guest

 !

 antenna gain 0

 peakdetect

 no dfs band block

 channel dfs

 station-role root

 bridge-group 1

 bridge-group 1 subscriber-loop-control

 bridge-group 1 spanning-disabled

 bridge-group 1 block-unknown-source

 no bridge-group 1 source-learning

 no bridge-group 1 unicast-flooding

!

interface GigabitEthernet0

 no ip address

 no ip route-cache

 duplex auto

 speed auto

!

interface GigabitEthernet0.2

 encapsulation dot1Q 2 native

 no ip route-cache

 bridge-group 1

 bridge-group 1 spanning-disabled

 no bridge-group 1 source-learning

!

interface GigabitEthernet0.20

 no ip route-cache

!

interface GigabitEthernet0.40

 encapsulation dot1Q 40

 no ip route-cache

 bridge-group 40

 bridge-group 40 spanning-disabled

 no bridge-group 40 source-learning

!

interface GigabitEthernet0.50

 encapsulation dot1Q 50

 no ip route-cache

 bridge-group 50

 bridge-group 50 spanning-disabled

 no bridge-group 50 source-learning

!

interface BVI1

 ip address

 no ip route-cache

 ipv6 address dhcp

 ipv6 address autoconfig

 ipv6 enable

!

ip forward-protocol nd

ip http server

no ip http secure-server

ip http help-path

!

!

bridge 1 route ip

!

!

banner motd ^CWarning: Access for Authorized personel only^C

!

line con 0

line vty 0 4

 login local

 transport input all

!

end

Review Cisco Networking for a $25 gift card