Cisco AP – multiple SSIDs

This post shows how to configure Cisco AP (Aironet 1200 series) for multiple SSID’s.

Configuration

Define two SSIDs.

Note that every SSID (Admin and Guest) is combined with one VLAN.

ap(config)#
ap(config)#dot11 ssid Admin
ap(config-ssid)#vlan 1
ap(config-ssid)#authentication open
ap(config-ssid)#exit
ap(config)#
ap(config)#dot11 ssid Visitor
ap(config-ssid)#vlan 20
ap(config-ssid)#authentication open
ap(config-ssid)#guest-mode // advertise the SSID in beacon
ap(config-ssid)#

Configure ethernet sub-interfaces

Note that every subinterface is connected with VLAN and bridge-group

ap(config)#
ap(config)#interface fastEthernet 0.1
ap(config-subif)#encapsulation dot1Q 1 native
ap(config-subif)#bridge-group 1
ap(config-subif)#
ap(config-subif)#interface fastEthernet 0.20
ap(config-subif)#encapsulation dot1Q 20
ap(config-subif)#bridge-group 20
ap(config-subif)#

Configure radio sub-interfaces

Note that every subinterface is connected with VLAN and bridge-group

ap(config-subif)#
ap(config-subif)#interface Dot11Radio0.1
ap(config-subif)#encapsulation dot1Q 1 native
ap(config-subif)#bridge-group 1
ap(config-subif)#
ap(config-subif)#interface Dot11Radio0.20
ap(config-subif)#encapsulation dot1Q 20
ap(config-subif)#bridge-group 20
ap(config-subif)#

Configure radio interface

Now, bind the SSIDs with your Radio.

ap(config)#
ap(config)#interface dot11Radio 0
ap(config-if)#ssid Admin
ap(config-if)#ssid Visitor
ap(config-if)#no shutdown
ap(config-if)#

Enable the same SSIDs on the second Radio

If your AP allows to run both Radios (2,4GHz and 5GHz) and you want to enable the same SSIDs on second Radio then you have to run analogous commands on that radio.

Enable BSSID

This step is optional. By default you can advertise only one SSID in Beacon – your AP is configured to use only one BSSID:

ap#show dot11  bssid

Interface      BSSID         Guest  SSID
Dot11Radio0   0017.59fa.c770  No   Admin
Dot11Radio0   0017.59fa.c770  Yes  Visitor

If you want to advertise multiple SSIDs on your AP then you have to enable mbssid option:

ap(config)#interface dot11Radio 0
ap(config-if)#mbssid

Now reconfigure your SSIDs:

ap(config)#
ap(config)#dot11 ssid Admin
ap(config-ssid)#mbssid guest-mode
ap(config-ssid)#
ap(config)#dot11 ssid Visitor
ap(config-ssid)#no guest-mode
ap(config-ssid)#mbssid guest-mode
ap(config-ssid)#

You can verify now, that you enabled multiple BSSID option and both of the SSIDs are advertised in beacon:

ap#show dot11  bssid

Interface      BSSID         Guest  SSID
Dot11Radio0   0017.59fa.c770  Yes  Admin
Dot11Radio0   0017.59fa.c771  Yes  Visitor

Sources

1. packetlife.net – Aironet APs: Bridge Groups and BVI

Leave a Reply

Your email address will not be published. Required fields are marked *