Wireless ssid change

[chrisgerke]

Previously had an ssid configure as follows;

dot11 ssid MYSSID
   vlan MYVLAN
   authentication open 
   guest-mode
!

interface Dot11Radio0
 ssid MYSSID
 !

But I want to replace it with this;

dot11 ssid MYSSID-NEW
   vlan MYVLAN
   authentication open 
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 0 MYPASSWORD
!

The strange thing I am finding is that users connecting to the new SSID are still being prompted with the authentication proxy login page. What am I doing wrong?

[tsuyoshi-kk]

Hi chrisgerke

The first one I would like to ask is, have you change the interface dot11Radio0 to the SSID you changed, MYSSID-NEW?

Secondly, have you added encrytion at interface dot11Radio0? 

Please have a look at the following page for AP configuration:

https://supportforums.cisco.com/document/61936/autonomous-ap-and-bridge-basic-configuration-template

Cheers,

KK

[chrisgerke]

I did, I basically ran a script like this:

no dot11 ssid MYSSID

interface Dot11Radio0
 no ssid MYSSID
 !

dot11 ssid MYSSID-NEW
   vlan MYVLAN
   authentication open 
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 0 MYPASSWORD
!

interface Dot11Radio0
 encryption vlan MYVLAN mode ciphers aes-ccm
 !
 ssid MYSSID-NEW

My aps connect back to an ACS server so I am guessing I've missed something. With regarding to the http proxy page from the previous config, what actually serves that up?

[Scott Olsen · Accepted solution]

Are they being presented with the "authentication proxy login page" after successful association to "MYSSID-NEW" with the new PSK?

If so, what else can you tell us about the this proxy login page?  I'm assuming it's some other separate captive web portal operating at layer3.  If that's the case, it exists "upstream" of your wireless setup...

Cheers,

Scott

[chrisgerke]

Doh, it was the asa upstream. The aaa authentication match was removed and all is good.

[Scott Olsen]

Terrific!  Glad I could help :-)