User Guide
Table Of Contents
- Cisco Wireless ISR and HWIC Access Point Configuration Guide
- Contents
- Preface
- Overview
- Configuring Radio Settings
- Enabling the Radio Interface
- Roles in Radio Network
- Configuring Network or Fallback Role
- Universal Client Mode
- Configuring Universal Client Mode
- Configuring Radio Data Rates
- Configuring Radio Transmit Power
- Configuring Radio Channel Settings
- Enabling and Disabling World Mode
- Enabling and Disabling Short Radio Preambles
- Configuring Transmit and Receive Antennas
- Disabling and Enabling Access Point Extensions
- Configuring the Ethernet Encapsulation Transformation Method
- Enabling and Disabling Reliable Multicast to Workgroup Bridges
- Enabling and Disabling Public Secure Packet Forwarding
- Configuring Beacon Period and DTIM
- Configuring RTS Threshold and Retries
- Configuring Maximum Data Retries
- Configuring Fragmentation Threshold
- Enabling Short Slot Time for 802.11g Radios
- Performing a Carrier Busy Test
- Configuring Multiple SSIDs
- Configuring an Access Point as a Local Authenticator
- Understand Local Authentication
- Configure a Local Authenticator
- Guidelines for Local Authenticators
- Configuration Overview
- Configuring the Local Authenticator Access Point
- Configuring Other Access Points to Use the Local Authenticator
- Configuring EAP-FAST Settings
- Limiting the Local Authenticator to One Authentication Type
- Unblocking Locked Usernames
- Viewing Local Authenticator Statistics
- Using Debug Messages
- Configuring Encryption Types
- Configuring Authentication Types
- Configuring RADIUS Servers
- Configuring and Enabling RADIUS
- Understanding RADIUS
- RADIUS Operation
- Configuring RADIUS
- Default RADIUS Configuration
- Identifying the RADIUS Server Host
- Configuring RADIUS Login Authentication
- Defining AAA Server Groups
- Configuring RADIUS Authorization for User Privileged Access and Network Services
- Starting RADIUS Accounting
- Selecting the CSID Format
- Configuring Settings for All RADIUS Servers
- Configuring the Access Point to Use Vendor-Specific RADIUS Attributes
- Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication
- Configuring WISPr RADIUS Attributes
- Displaying the RADIUS Configuration
- RADIUS Attributes Sent by the Access Point
- Configuring and Enabling RADIUS
- Configuring VLANs
- Configuring QoS
- Channel Settings
- Protocol Filters
- Supported MIBs
- Error and Event Messages
- Glossary
- Index
8-7
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Chapter 8 Configuring VLANs
Configuring VLANs
Assigning Names to VLANs
You c an a ss ign a na me t o a VL AN in ad dit ion to its n um er ic al ID . VL AN n am es c an c on t ai n up t o 3 2
ASCII characters. The access point stores each VLAN name and ID pair in a table.
Guidelines for Using VLAN Names
Keep these guidelines in mind when using VLAN names:
• The mapping of a VLAN name to a VLAN ID is local to each access point, so across your network,
you can assign the same VLAN name to a different VLAN ID.
Note If clients on your wireless LAN require seamless roaming, Cisco recommends that you assign
the same VLAN name to the same VLAN ID across all access points, or that you use only VLAN
IDs without names.
• Every VLAN configured on your access point must have an ID, but VLAN names are optional.
• VLAN names can contain up to 32 ASCII characters. However, a VLAN name cannot be a number
between 1 and 4095. For example, vlan4095 is a valid VLAN name, but 4095 is not. The access point
reserves the numbers 1 through 4095 for VLAN IDs.
Creating a VLAN Name
Beginning in privileged EXEC mode, follow these steps to assign a name to a VLAN:
Use the no form of the command to remove the name from the VLAN. Use the show dot11 vlan-name
privileged EXEC command to list all the VLAN name and ID pairs configured on the access point.
Using a RADIUS Server to Assign Users to VLANs
You c an c on f i gu re y ou r RA DI US au th en ti ca tio n se rve r to a ss ign u se rs or g ro up s o f u se rs to a s pe ci fic
VLAN when they authenticate to the network.
Note Unicast and multicast cipher suites advertised in WPA information element (and negotiated during
802.11 association) may potentially mismatch with the cipher suite supported in an explicitly assigned
VLAN. If the RADIUS server assigns a new vlan ID which uses a different cipher suite from the
previously negotiated cipher suite, there is no way for the access point and client to switch back to the
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
dot11 vlan-name name vlan vlan-id Assign a VLAN name to a VLAN ID. The name can contain up
to 32 ASCII characters.
Step 3
end Return to privileged EXEC mode.
Step 4
copy running-config startup-config (Optional) Save your entries in the configuration file.