07-28-2011 01:34 AM - edited 07-03-2021 08:29 PM
Hi,
I am facing problem in creating the third SSID on Cisco C1130.
I already have two SSID one for the corporate user VLAN 1 and one for the Guest VLAN3 and it is working fine.
Now I want to add third SSID (EMGAS) on VLAN 23 with WEP. But I am not able to do this. My configuration mention below. User is not able to see the SSID
in the wireless and if manually creating the SSID it is showing identifying network.
on the AP the following error is coming
*Jul 28 01:32:44.263: %DOT11-6-ASSOC: Interface Dot11Radio0, Station EMGASQ-AP1 5894.6bdb.0a70 Associated KEY_MGMT[NONE]
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.200.14 auth-port 1645 acct-port 1646
server 192.168.10.9 auth-port 1645 acct-port 1646
!
aaa group server radius rad_admin
server 192.168.200.14 auth-port 1645 acct-port 1646
server 192.168.10.9 auth-port 1645 acct-port 1646
!
aaa authentication login default group rad_admin local
aaa authentication login eap_methods group rad_eap
aaa authorization exec default group rad_admin local
!
aaa session-id common
ip domain name enoc.ae
!
!
dot11 syslog
!
dot11 ssid EMGAS
vlan 23
authentication open
!
dot11 ssid GUEST
vlan 3
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
dot11 ssid WAP
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
power inline negotiation prestandard source
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
encryption vlan 1 mode ciphers tkip
!
encryption vlan 3 mode ciphers tkip
!
encryption vlan 23 key 1 size 40bit 7 EABC978C052F transmit-key
encryption vlan 23 mode wep mandatory
!
ssid EMGAS
!
ssid GUEST
!
ssid WAP
!
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
no preamble-short
channel 2412
station-role root
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface FastEthernet0.23
encapsulation dot1Q 23
no ip route-cache
bridge-group 23
no bridge-group 23 source-learning
bridge-group 23 spanning-disabled
!
interface BVI1
ip address 192.168.3.21 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.3.1
Kindly assist me.
07-28-2011 04:20 AM
U will not be able to see the SSID because its not broadcasted.. Please check the below video that i have posted on the same..
https://supportforums.cisco.com/videos/2343
and the doc
https://supportforums.cisco.com/docs/DOC-14496
and please create the sub interfaces on the radio as well.. the config should be..
interface dot11radio 0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface dot11radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface dot11radio 0.23
encapsulation dot1Q 23
no ip route-cache
bridge-group 23
no bridge-group 23 source-learning
bridge-group 23 spanning-disabled
end
To broadcast the SSID
dot11 ssid EMGAS
mbssid guest-mode
!
dot11 ssid GUEST
mbssid guest-mode
!
dot11 ssid WAP
mbssid guest-mode
end
conf t
int dot11 0
mbssid
This will help you!!
Please dont forget to rate the usefull posts!!
Regards
Surendra
07-28-2011 04:53 AM
Hi
thanks for the reply and I have already viewed your all posts and video and followed the same procedure. Attached is the updated configuration.
dot11 ssid EMGAS
vlan 23
authentication open
guest-mode
!
dot11 ssid GUEST
vlan 3
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
dot11 ssid WAP
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
encryption vlan 1 mode ciphers tkip
!
encryption vlan 3 mode ciphers tkip
!
encryption vlan 23 key 1 size 40bit 7 EABC978C052F transmit-key
encryption vlan 23 mode wep mandatory
!
ssid EMGAS
!
ssid GUEST
!
ssid WAP
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio0.23
encapsulation dot1Q 23
no ip route-cache
bridge-group 23
bridge-group 23 subscriber-loop-control
bridge-group 23 block-unknown-source
no bridge-group 23 source-learning
no bridge-group 23 unicast-flooding
bridge-group 23 spanning-disabled
AP1#show dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [WAP] :
MAC Address IP address Device Name Parent State
0013.e83d.9b7d 192.168.3.79 ccx-client EMGASQ-AP1 self EAP-Assoc
5894.6bc0.3674 192.168.3.142 ccx-client EMGASQ-AP1 self EAP-Assoc
5894.6bdb.0a70 192.168.3.145 ccx-client EMGASQ-AP1 self EAP-Assoc
But unable to connect I dont want to even advertise my SSID. I have given the guest mode command but I have
manually configured the SSID but no luck.
07-28-2011 05:28 AM
wat happens when u connect??
Regards
Surendra
07-28-2011 08:56 AM
Hi,
I recofigured and it is working fine for me. Let me do one more round of testing and I will be get back to you if i will face any problem.
Thanks for the support.
07-28-2011 09:08 AM
Thats nice to hear!! lemme know if u need any help, i will be more than happy to assist you!!
Please dont forget to rate the usefull posts!!
Regards
Surendra
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide