Using AP Groups with FlexConnect Groups to assign SSID's to schools

[PatrickCavell85782]

A school district with 30+ schools uses Cisco wireless with a pair of 8510 controllers in their DC configured as an HA pair. All the AP's at the schools are in FlexConnect mode and in their own FlexConnect groups. The school district wants to restrict certain SSID's to certain schools. I'm thinking the best way to do this is to create an AP group for each school and place all the AP's at a school in it's respective AP group. Then they can assign the SSID's by AP Group.

Am I on the right path?

Thanks for any assistance.

[Haydn Andrews · Accepted solution]

Correct - AP groups can be used to restrict which SSIDs are broadcast.

However ensure all WLAN IDs start above 16 to ensure they dont also get broadcast to the site

[PatrickCavell85782]

Thanks Haydn. Very helpful.

[Wes Schochet]

The default AP group (default-group) uses 1-16.  You can pick and choose any SSIDs in other AP groups, no matter what the id is.

[Scott Fella]

Try to fully understand their ask.  You might be able to get away with a few ap groups and a few custom groups especially if they want specific SSID on specific ap's or areas.  This does help with changes in the future, where you don't have to deal with every ap group.

[Rich R]

By the way presume you're aware that 8510 goes end of support in a few months time?
https://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/eos-eol-notice-c51-740222.html
And it's already way past end of security/vulnerability support and is affected by some critical security vulnerabilities.

Suggest you talk to them about the need to upgrade.

[PatrickCavell85782]

Thanks Rich. We've made them well aware of that.