cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1447
Views
5
Helpful
5
Replies

Multiple SSID

wasiimcisco
Level 1
Level 1

Hi,

I am facing problem in creating the third SSID on Cisco C1130.

I already have two SSID one for the corporate user VLAN 1 and one for the Guest VLAN3 and it is working fine.

Now I want to add third SSID (EMGAS) on VLAN 23 with WEP. But I am not able to do this. My configuration mention below. User is not able to see the SSID

in the wireless and if manually creating the SSID it is showing identifying network.

on the AP the following error is coming

*Jul 28 01:32:44.263: %DOT11-6-ASSOC: Interface Dot11Radio0, Station EMGASQ-AP1 5894.6bdb.0a70 Associated KEY_MGMT[NONE]

aaa new-model

!

!

aaa group server radius rad_eap

server 192.168.200.14 auth-port 1645 acct-port 1646

server 192.168.10.9 auth-port 1645 acct-port 1646

!

aaa group server radius rad_admin

server 192.168.200.14 auth-port 1645 acct-port 1646

server 192.168.10.9 auth-port 1645 acct-port 1646

!

aaa authentication login default group rad_admin local

aaa authentication login eap_methods group rad_eap

aaa authorization exec default group rad_admin local

!

aaa session-id common

ip domain name enoc.ae

!

!

dot11 syslog

!

dot11 ssid EMGAS

   vlan 23

   authentication open

!        

dot11 ssid GUEST

   vlan 3

   authentication open eap eap_methods

   authentication network-eap eap_methods

   authentication key-management wpa

!        

dot11 ssid WAP

   vlan 1

   authentication open eap eap_methods

   authentication network-eap eap_methods

   authentication key-management wpa

!        

power inline negotiation prestandard source

interface Dot11Radio0

no ip address

no ip route-cache

!       

encryption mode ciphers tkip

!       

encryption vlan 1 mode ciphers tkip

!       

encryption vlan 3 mode ciphers tkip

!       

encryption vlan 23 key 1 size 40bit 7 EABC978C052F transmit-key

encryption vlan 23 mode wep mandatory

!       

ssid EMGAS

!       

ssid GUEST

!       

ssid WAP

!       

speed  basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0

no preamble-short

channel 2412

station-role root

interface FastEthernet0

no ip address

no ip route-cache

duplex auto

speed auto

!        

interface FastEthernet0.1

encapsulation dot1Q 1 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!        

interface FastEthernet0.3

encapsulation dot1Q 3

no ip route-cache

bridge-group 3

no bridge-group 3 source-learning

bridge-group 3 spanning-disabled

!        

interface FastEthernet0.23

encapsulation dot1Q 23

no ip route-cache

bridge-group 23

no bridge-group 23 source-learning

bridge-group 23 spanning-disabled

!        

interface BVI1

ip address 192.168.3.21 255.255.255.0

no ip route-cache

!        

ip default-gateway 192.168.3.1

Kindly assist me.

5 Replies 5

Surendra BG
Cisco Employee
Cisco Employee

U will not be able to see the SSID because its not broadcasted.. Please check the below video that i have posted on the same..

https://supportforums.cisco.com/videos/2343

and the doc

https://supportforums.cisco.com/docs/DOC-14496

and please create the sub interfaces on the radio as well.. the config should be..

interface dot11radio 0.1

encapsulation dot1Q 1 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!        

interface dot11radio0.3

encapsulation dot1Q 3

no ip route-cache

bridge-group 3

no bridge-group 3 source-learning

bridge-group 3 spanning-disabled

!        

interface dot11radio 0.23

encapsulation dot1Q 23

no ip route-cache

bridge-group 23

no bridge-group 23 source-learning

bridge-group 23 spanning-disabled

end

To broadcast the SSID

dot11 ssid EMGAS

mbssid guest-mode

!        

dot11 ssid GUEST

mbssid guest-mode 

!        

dot11 ssid WAP

mbssid guest-mode

end

conf t

int dot11 0

mbssid

This will help you!!

Please dont forget to rate the usefull posts!!

Regards

Surendra

Regards
Surendra BG

Hi

thanks for the reply and I have already viewed your all posts and video and followed the same procedure. Attached is the updated configuration.

dot11 ssid EMGAS

   vlan 23

   authentication open

   guest-mode

!        

dot11 ssid GUEST

   vlan 3

   authentication open eap eap_methods

   authentication network-eap eap_methods

   authentication key-management wpa

!        

dot11 ssid WAP

   vlan 1

   authentication open eap eap_methods

   authentication network-eap eap_methods

   authentication key-management wpa

interface Dot11Radio0

no ip address

no ip route-cache

!       

encryption mode ciphers tkip

!       

encryption vlan 1 mode ciphers tkip

!       

encryption vlan 3 mode ciphers tkip

!       

encryption vlan 23 key 1 size 40bit 7 EABC978C052F transmit-key

encryption vlan 23 mode wep mandatory

!       

ssid EMGAS

!       

ssid GUEST

!       

ssid WAP

interface Dot11Radio0.1

encapsulation dot1Q 1 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!        

interface Dot11Radio0.3

encapsulation dot1Q 3

no ip route-cache

bridge-group 3

bridge-group 3 subscriber-loop-control

bridge-group 3 block-unknown-source

no bridge-group 3 source-learning

no bridge-group 3 unicast-flooding

bridge-group 3 spanning-disabled

!        

interface Dot11Radio0.23

encapsulation dot1Q 23

no ip route-cache

bridge-group 23

bridge-group 23 subscriber-loop-control

bridge-group 23 block-unknown-source

no bridge-group 23 source-learning

no bridge-group 23 unicast-flooding

bridge-group 23 spanning-disabled

AP1#show dot11 associations

802.11 Client Stations on Dot11Radio0:

SSID [WAP] :

MAC Address    IP address      Device        Name            Parent         State    

0013.e83d.9b7d 192.168.3.79    ccx-client    EMGASQ-AP1      self           EAP-Assoc

5894.6bc0.3674 192.168.3.142   ccx-client    EMGASQ-AP1      self           EAP-Assoc

5894.6bdb.0a70 192.168.3.145   ccx-client    EMGASQ-AP1      self           EAP-Assoc

But unable to connect I dont want to even advertise my SSID. I have given the guest mode command but I have

manually configured the SSID but no luck.

wat happens when u connect??

Regards

Surendra

Regards
Surendra BG

Hi,

I recofigured and it is working fine for me. Let me do one more round of testing and I will be get back to you if i will face any problem.

Thanks for the support.

Thats nice to hear!! lemme know if u need any help, i will be more than happy to assist you!!

Please dont forget to rate the usefull posts!!

Regards

Surendra

Regards
Surendra BG
Review Cisco Networking for a $25 gift card