Configuring Multiple SSIDs in Cisco 1250 Access Points Series 3
Posted by: Yasir Irfan
Multiple SSID, Configuring Multiple SSID in Cisco Access Point, Cisco Aironet 1250 Series Access Points, configuring multiple SSIDs, VLANS, Cisco Configurations, Wireless, Cisco Wireless, Cisco Access Points, Cisco Aironet 1250, Cisco Aironet 1250 Access Point, Sample Configurations, configuration scenarios, Windows 2003 Server, Wireless Clients, SSIDs, Native VLAN, Cisco Catalyst 3560 Switch, Cisco Catalyst 6500 Series Switch, IOS Version 12.4(10b) JDA3, IOS version 12.2(44) SE1, IOS version 12.2(18) SXF14, Cisco IOS, DHCP Server, IP Address
In today’s entry we will focus on configuration of VLANs and SSIDs in a Cisco Aironet 1250 Series Access Point. The procedure is as follows.
Configure
In this section, you will see the configuration steps required to complete the above mentioned scenario.
1st Step: Configure the Native VLAN on the Cisco Aironet 1250 Series Access Point
The Native VLAN is a VLAN to which the Cisco Aironet 1250 Series Access Point and the Cisco Catalyst 3560 Switch are connected. Native VLAN of the Cisco Aironet 1250 Series Access Point is usually different from the other VLANS configured in the Cisco Aironet 1250 Series Access Point (In our case VLAN 101 and VLAN 102). The IP address used for the management of the Cisco Aironet 1250 Series Access Point is assigned to its BVI Interface and the IP address assigned is in the native VLAN. (In our case VLAN 100). . The traffic, for example, management traffic, sent to and by the Point itself assumes the native VLAN (VLAN 100), and it is untagged. All untagged traffic that is received on an IEEE 802.1Q (dot1q) trunk port is forwarded with the native VLAN (VLAN 100) that is configured for the port. If a packet has a VLAN ID that is the same as the native VLAN ID of the sending port, the Cisco Catalyst 3560 Switch sends the packet without a tag. Otherwise, the switch sends the packet with a tag.
In order to configure a native VLAN on a Cisco Aironet 1250 Series Access Point, issue the following commands in the global configuration mode on the Cisco Aironet 1250 Series Access Point
ITKE-AP-01(config)#interface gigabitEthernet 0.100
ITKE-AP-01(config-subif)# encapsulation dot1Q 100 native
ITKE-AP-01(config-subif)#exit
(The above commands will configure the encapsulation as dot1q and assign VLAN 100 as the native VLAN on the Giga Ethernet interface.)
ITKE-AP-01(config)#interface dot11radio 0.100
ITKE-AP-01(config-subif)# encapsulation dot1Q 100 native
ITKE-AP-01(config-subif)#exit
(The above commands will configure the encapsulation as dot1q and assign VLAN 100 as the native VLAN on the radio interface.)
2nd Step: Configure the SSIDs on the Cisco Aironet 1250 Series Access Point
In this step we will configure two VLANs (VLAN 101 & VLAN 102) one for the ITKE administration department and other for the guest users only with an internet access. The SSIDs are also need to be associated with specific VLANS as shown below.
· VLAN 101 for the ITKE administration department and uses the SSID ADMIN.
· VLAN 102 for the guest users and uses the SSID GUEST.
In order to configure a VLAN101 and 102 on a Cisco Aironet 1250 Series Access Point, issue the following commands in the global configuration mode on the Cisco Aironet 1250 Series Access Point
ITKE-AP-01(config)#dot11 ssid ADMIN
ITKE-AP-01(config-ssid)#authentication open
ITKE-AP-01(config-ssid)#vlan 101
(The above commands will create an ssid ADMIN, assigned to VLAN 101 and with an open authentication.)
ITKE-AP-01(config)#dot11 ssid GUEST
ITKE-AP-01(config-ssid)#authentication open
ITKE-AP-01(config-ssid)#vlan 102
(The above commands will create an ssid GUEST, assigned to VLAN 102 and with an open authentication).
ITKE-AP-01(config)#interface gigabitEthernet 0.101
ITKE-AP-01(config-subif)#encapsulation dot1Q 101
ITKE-AP-01(config-subif)#bridge-group 101
ITKE-AP-01(config-subif)#exit
ITKE-AP-01(config)#
(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the giga Ethernet).
ITKE-AP-01(config)#interface dot11Radio 0.101
ITKE-AP-01(config-subif)#encapsulation dot1Q 101
ITKE-AP-01(config-subif)#bridge-group 101
ITKE-AP-01(config-subif)#exit
ITKE-AP-01(config)#
(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the sub interface on the radio interface).
ITKE-AP-01(config)#interface gigabitEthernet 0.102
ITKE-AP-01(config-subif)#encapsulation dot1Q 102
ITKE-AP-01(config-subif)#bridge-group 102
ITKE-AP-01(config-subif)#exit
ITKE-AP-01(config)#
(The above commands will set the encapsulation dot1q for VLAN 102 and assigns the sub interface to bridge group 102 to the giga Ethernet).
ITKE-AP-01(config)#interface dot11Radio 0.102
ITKE-AP-01(config-subif)#encapsulation dot1Q 102
ITKE-AP-01(config-subif)#bridge-group 102
ITKE-AP-01(config-subif)#exit
ITKE-AP-01(config)#
(The above commands will set the encapsulation dot1q for VLAN 101 and assigns the sub interface to bridge group 101 to the sub interface on the radio interface).
3rd Step: Assign the multiple SSIDs to the radio interface on the Cisco Aironet 1250 Series Access Point
ITKE-AP-01(config)#interface dot11Radio 0
ITKE-AP-01(config-if)#ssid ADMIN
ITKE-AP-01(config-if)#ssid GUEST
ITKE-AP-01(config-if)#mbssid
(The above commands assigns the multiple SSIDs ADMIN and GUEST to the radio interface dot11radio 0 ).
Note: The SSIDs ADMIN and GUEST are configured for open authentication, For information on how to configure different authentication types on the Cisco Aironet 1250 Series Access Point , refer the Cisco document “Configuring Authentication Types”.
In next post we will look at the configuration for the Cisco 3560 Switch .
0 Comments
RSS Feed
Email a friend
