Single WAP with 2 SSID and 2 different subnets

mahesh18 · ‎06-11-2015

Hi Everyone,

Is it possible if i have single WAP and WLC to setup 2 SSIDs one for internal users and other for visitors?

Also i want that internal and Visitors should be on different subnets?

Regards

Mahesh

Rasika Nayanajith · ‎06-11-2015

Yes, see below sample config to see if that helps

Here is AP configuration. SSID Name, vlan, password you can modify as necessary. I have assumed vlan 999 as AP management on 192.168.99.x/24, modify that as needed.

hostname AP-01
!
dot11 ssid SSID_A
   vlan 10
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii <SSID_A_PASSWORD>
!
dot11 ssid SSID_B
   vlan 20
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii <SSID_B_PASSWORD>
!
interface Dot11Radio0
 encryption vlan 10 mode ciphers aes-ccm
 encryption vlan 20 mode ciphers aes-ccm
 mbssid
 ssid SSID_A
 ssid SSID_B
 no shut
!
interface Dot11Radio1
 channel width 40-above <- if 802.11n AP & you want to bond two 20MHz
 encryption vlan 10 mode ciphers aes-ccm
 encryption vlan 20 mode ciphers aes-ccm
 mbssid
 ssid SSID_A
 ssid SSID_B
 no shut
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface Dot11Radio0.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface Dot11Radio0.999
 encapsulation dot1Q 999 native
 bridge-group 1
!
interface Dot11Radio1.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface Dot11Radio1.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface Dot11Radio1.999
 encapsulation dot1Q 999 native
 bridge-group 1
!
interface GigabitEthernet0.10
 encapsulation dot1Q 10
 bridge-group 10
!
interface GigabitEthernet0.20
 encapsulation dot1Q 20
 bridge-group 20
!
interface GigabitEthernet0.999
 encapsulation dot1Q 999 native
 bridge-group 1
!
interface BVI1
 ip address 192.168.99.101 255.255.255.0
ip default-gateway 192.168.99.1

Here is the switchport configuration where this AP connects.

interface GigabitEthernet1/0/X
 description AP-01
 switchport trunk native vlan 999
 switchport trunk allowed vlan 10,20,999
 switchport mode trunk
 spanning-tree portfast trunk

HTH

Rasika

*** Pls rate all useful responses ***

Rasika Nayanajith · ‎06-11-2015

Sorry, I noticed you have WLC. Below config only applicable if it is Autonomous AP.

In WLC environment, you simply want to create two WLAN and map it to two different dynamic interfaces.

Rasika

mahesh18 · ‎06-12-2015

Hi Rasika,

So i can create two WLAN ids in WLC via gui.

Sau i create ssid internal and visitors.

Now i have single WAP 1252 and WLC 4402 how do i map it to different dynamic inetrface?

Can you please explain in detail about mapping?

Regards

MAhesh

Rasika Nayanajith · ‎06-12-2015

Hi Mahesh,

This post should help you on this

https://rscciew.wordpress.com/2014/01/22/configure-dynamic-interface-on-wlc/

HTH

Rasika

gohussai · ‎06-12-2015

Yes it is possible.

In WLC scenario you use create the 2-WLAN on WLC and map it to 2 different Dynamic interfaces.

But in Stand alone AP where no involvement of WLC configuration are to be made on AP and still it is possible.