Multiple VLAN with multiple SSID issue

[Ibrahim Bhuiyan]

Hi,

I have configured a wireless solution, where multiple VLAN with multiple SSID according to below design of cisco. I have configured two SSID with two VLAN. But two SSID doesn't available at a time. If one have up then another is unavailable. What is the problem. I have configure line by line according to below link.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/69773-vlan-ap-config.html

[Seb Rupik]

Hi there,

I understand you copied the commands from the linked document, but could you share the running config as it appears on your AP?

cheers,

Seb.

[Ibrahim Bhuiyan]

You can check below the AP configuration.

run
Building configuration...

Current configuration : 2634 bytes
!
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$19FQ$nLtwBBCeAX5cwkmuqtZu.0
!
no aaa new-model
no ip source-route
no ip cef
!
!
!
!
dot11 pause-time 100
--More--  dot11 syslog
!
dot11 ssid Admin
vlan 20
authentication open
mbssid guest-mode
!
dot11 ssid Guest
vlan 30
band-select
authentication open
!
!
!
no ipv6 cef
!
!
username Cisco password 7 062506324F41
!
!
bridge irb
!
!
--More--  !
interface Dot11Radio0
no ip address
!
ssid Admin
!
ssid Guest
!
antenna gain 0
stbc
mbssid
station-role root
!
interface Dot11Radio0.2
encapsulation dot1Q 2 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.20
--More--   encapsulation dot1Q 20
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 spanning-disabled
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
!
interface Dot11Radio0.30
encapsulation dot1Q 30
bridge-group 30
bridge-group 30 subscriber-loop-control
bridge-group 30 spanning-disabled
bridge-group 30 block-unknown-source
no bridge-group 30 source-learning
no bridge-group 30 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
antenna gain 0
peakdetect
dfs band 3 block
--More--   channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.2
encapsulation dot1Q 2 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.20
encapsulation dot1Q 20
bridge-group 20
--More--   bridge-group 20 spanning-disabled
no bridge-group 20 source-learning
!
interface GigabitEthernet0.30
encapsulation dot1Q 30
bridge-group 30
bridge-group 30 spanning-disabled
no bridge-group 30 source-learning
!
interface BVI1
mac-address 84b8.0281.a353
ip address 172.16.1.20 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
--More--  !
!
!
line con 0
line vty 0 4
login local
transport input all
!
end

ap#

Please let me know the issue?

[Seb Rupik · Accepted solution]

Hi there,

Make sure that both SSID can broadcast simultaneously:

!
dot11 ssid Admin
  mbssid guest-mode
dot11 ssid Guest
  mbssid guest-mode
!

cheers,

Seb.

[Ibrahim Bhuiyan]

Thank you Rupik. Now this SSID is up but Failed to obtain IP Address from "Guest" ssid. Here I attached total configuration (Router, Switch an AP). Please check the attachment. "Admin" ssid is ok and obtaining ip address by dhcp.

[Seb Rupik]

Hi,

From the AP, when a client is trying to use the Guest SSID what is the output of:
sh dot11 associations

From the router, what is the output of:
sh mac-address
sh ip dhcp pool

cheers,

Seb.

[Ibrahim Bhuiyan]

Hi Rupik,

I already solved the problem. I need to bandwidth control for each ssid. is it possible? if yes, please share the configuration.

Thanks.

[Sandeep Choudhary]

Hi,

If you have an autonomous AP and then its really not possible to limit the Bandwidth/traffic. You might be able to setup an ACL on the router to limit the bandwidth as long as these users are on a different subnet than your internal user. 

in other words...

My recommandation will be to implement the QoS  and you can limit the traffic using any L3 device(Core switch or Router) which is capable of  QoS.

Regards

Dont forget to arte helpful posts