Multiple SSID and Encryption Keys on one Access Point?

MARK CHRISTY · ‎03-20-2013

Is it possible to have an access point use more than one SSID and associated encryption? I have access points that utilize sub-interfaces to serve differenet IP needs of work group clients. That is not the question. I have a scenario where I have to use simple WEP and with Windows7 laptops, users are able to view the WEP encryption key after it has been entered, thus making any security that WEP does have irrelevant!

If I could have two SSIDs associated to the interface dot11r0 that each had a unique WEP key I could let laptops use one key, and other infrastructure (non-mobile) wireless clients could use the first key.

Sounds silly, but it would allow me to easily manage a few access points in specific locations instead of all of my access points.

kcnajaf · ‎03-20-2013

Hi Mark,

Hope you looking to have a AP configured with multiple SSID's with different WEP key's enabled, if so then this should be possible as long as if you can put both SSID's on different VLAN's. A typical configuration would be as below.

dot11 ssid ABC

vlan 1

authentication open

!

dot11 ssid XYZ

vlan 2

authentication open

interface Dot11Radio0

encryption vlan 1 key 1 size 40bit 7 XXXXXXXXXXX transmit-key

encryption vlan 1 mode wep mandatory

!

encryption vlan 2 key 1 size 40bit 7 YYYYYYYYYYY transmit-key

encryption vlan 2 mode wep mandatory

!

interface Dot11Radio0.1

encapsulation dot1Q 1 native

bridge-group 1

!

interface Dot11Radio0.2

encapsulation dot1Q 2

bridge-group 2

!

interface FastEthernet0.1

encapsulation dot1Q 1 native

bridge-group 1

!

interface FastEthernet0.2

encapsulation dot1Q 2

bridge-group 2

Regrads

Najaf

Please rate when applicable or helpful !!!

MARK CHRISTY · ‎03-21-2013

Hi -- Thanks for the configs. I actually utilize a similar arrangement at some specific locations. This is for the purpose of serving two IP Network ranges from the same access point. In the case of this thread, I'd actually like to use this on the same subnet... so I don't think it is technically possible. I've had multiple SSIDs but not unique encryption keys per SSID (without the config you suggest).