User Guide
Table Of Contents
- Cisco Wireless ISR and HWIC Access Point Configuration Guide
- Contents
- Preface
- Overview
- Configuring Radio Settings
- Enabling the Radio Interface
- Roles in Radio Network
- Configuring Network or Fallback Role
- Universal Client Mode
- Configuring Universal Client Mode
- Configuring Radio Data Rates
- Configuring Radio Transmit Power
- Configuring Radio Channel Settings
- Enabling and Disabling World Mode
- Enabling and Disabling Short Radio Preambles
- Configuring Transmit and Receive Antennas
- Disabling and Enabling Access Point Extensions
- Configuring the Ethernet Encapsulation Transformation Method
- Enabling and Disabling Reliable Multicast to Workgroup Bridges
- Enabling and Disabling Public Secure Packet Forwarding
- Configuring Beacon Period and DTIM
- Configuring RTS Threshold and Retries
- Configuring Maximum Data Retries
- Configuring Fragmentation Threshold
- Enabling Short Slot Time for 802.11g Radios
- Performing a Carrier Busy Test
- Configuring Multiple SSIDs
- Configuring an Access Point as a Local Authenticator
- Understand Local Authentication
- Configure a Local Authenticator
- Guidelines for Local Authenticators
- Configuration Overview
- Configuring the Local Authenticator Access Point
- Configuring Other Access Points to Use the Local Authenticator
- Configuring EAP-FAST Settings
- Limiting the Local Authenticator to One Authentication Type
- Unblocking Locked Usernames
- Viewing Local Authenticator Statistics
- Using Debug Messages
- Configuring Encryption Types
- Configuring Authentication Types
- Configuring RADIUS Servers
- Configuring and Enabling RADIUS
- Understanding RADIUS
- RADIUS Operation
- Configuring RADIUS
- Default RADIUS Configuration
- Identifying the RADIUS Server Host
- Configuring RADIUS Login Authentication
- Defining AAA Server Groups
- Configuring RADIUS Authorization for User Privileged Access and Network Services
- Starting RADIUS Accounting
- Selecting the CSID Format
- Configuring Settings for All RADIUS Servers
- Configuring the Access Point to Use Vendor-Specific RADIUS Attributes
- Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication
- Configuring WISPr RADIUS Attributes
- Displaying the RADIUS Configuration
- RADIUS Attributes Sent by the Access Point
- Configuring and Enabling RADIUS
- Configuring VLANs
- Configuring QoS
- Channel Settings
- Protocol Filters
- Supported MIBs
- Error and Event Messages
- Glossary
- Index
8-5
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Chapter 8 Configuring VLANs
Configuring VLANs
Configuring a VLAN
Note When you configure VLANs on access points, the Native VLAN must be VLAN1. In a single
architecture, client traffic received by the access point is tunneled through an IP-GRE tunnel, which is
established on the access point’s Ethernet interface native VLAN. Because of the IP-GRE tunnel, some
users may confgure another switch port as VLAN1. This misconfiguration causes errors on the switch
port.
Configuring your access point to support VLANs is a three-step process:
1. Enable the VLAN on the radio and Ethernet ports.
2. Assign SSIDs to VLANs.
3. Assign authentication settings to SSIDs.
This section describes how to assign SSIDs to VLANs and how to enable a VLAN on the access point
radio and Ethernet ports. For detailed instructions on assigning authentication types to SSIDs, see
Chapter 6, “Configuring Authentication Types.” For instructions on assigning other settings to SSIDs,
see Chapter 3, “Configuring Multiple SSIDs.”
You c an c on fig ure u p to 1 6 SSI Ds o n th e a cce ss po in t, s o yo u c an s up po rt up to 1 6 V LA Ns t hat a r e
configured on your LAN.
Beginning in privileged EXEC mode, follow these steps to assign an SSID to a VLAN and enable the
VLAN on the access point radio and Ethernet ports:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface dot11radio 0 | 1 Enter interface configuration mode for the radio interface.
Step 3
ssid ssid-string Create an SSID and enter SSID configuration mode for the new
SSID. The SSID can consist of up to 32 alphanumeric
characters. SSIDs are case sensitive.
Note You u se the ssid command’s authentication options to
configure an authentication type for each SSID. See
Chapter 6, “Configuring Authentication Types,” for
instructions on configuring authentication types.
Step 4
vlan vlan-id (Optional) Assign the SSID to a VLAN on your network. Client
devices that associate using the SSID are grouped into this
VLAN. Enter a VLAN ID from 1 to 4095. You can assign only
one SSID to a VLAN.
Tip If your network uses VLAN names, you can also assign
names to the VLANs on your access point. See the
“Assigning Names to VLANs” section on page 8-7 for
instructions.
Step 5
exit Return to interface configuration mode for the radio interface.
Step 6
interface dot11radio 0.x | 1.x Enter interface configuration mode for the radio VLAN sub
interface.