User Guide
Table Of Contents
- Cisco Wireless ISR and HWIC Access Point Configuration Guide
- Contents
- Preface
- Overview
- Configuring Radio Settings
- Enabling the Radio Interface
- Roles in Radio Network
- Configuring Network or Fallback Role
- Universal Client Mode
- Configuring Universal Client Mode
- Configuring Radio Data Rates
- Configuring Radio Transmit Power
- Configuring Radio Channel Settings
- Enabling and Disabling World Mode
- Enabling and Disabling Short Radio Preambles
- Configuring Transmit and Receive Antennas
- Disabling and Enabling Access Point Extensions
- Configuring the Ethernet Encapsulation Transformation Method
- Enabling and Disabling Reliable Multicast to Workgroup Bridges
- Enabling and Disabling Public Secure Packet Forwarding
- Configuring Beacon Period and DTIM
- Configuring RTS Threshold and Retries
- Configuring Maximum Data Retries
- Configuring Fragmentation Threshold
- Enabling Short Slot Time for 802.11g Radios
- Performing a Carrier Busy Test
- Configuring Multiple SSIDs
- Configuring an Access Point as a Local Authenticator
- Understand Local Authentication
- Configure a Local Authenticator
- Guidelines for Local Authenticators
- Configuration Overview
- Configuring the Local Authenticator Access Point
- Configuring Other Access Points to Use the Local Authenticator
- Configuring EAP-FAST Settings
- Limiting the Local Authenticator to One Authentication Type
- Unblocking Locked Usernames
- Viewing Local Authenticator Statistics
- Using Debug Messages
- Configuring Encryption Types
- Configuring Authentication Types
- Configuring RADIUS Servers
- Configuring and Enabling RADIUS
- Understanding RADIUS
- RADIUS Operation
- Configuring RADIUS
- Default RADIUS Configuration
- Identifying the RADIUS Server Host
- Configuring RADIUS Login Authentication
- Defining AAA Server Groups
- Configuring RADIUS Authorization for User Privileged Access and Network Services
- Starting RADIUS Accounting
- Selecting the CSID Format
- Configuring Settings for All RADIUS Servers
- Configuring the Access Point to Use Vendor-Specific RADIUS Attributes
- Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication
- Configuring WISPr RADIUS Attributes
- Displaying the RADIUS Configuration
- RADIUS Attributes Sent by the Access Point
- Configuring and Enabling RADIUS
- Configuring VLANs
- Configuring QoS
- Channel Settings
- Protocol Filters
- Supported MIBs
- Error and Event Messages
- Glossary
- Index
3-6
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Chapter 3 Configuring Multiple SSIDs
Configuring Multiple Basic SSIDs
The allowed list of SSIDs from the RADIUS server are in the form of Cisco VSAs. The Internet
Engineering Task Force (IETF) draft standard specifies a method for communicating vendor-specific
information between the access point and the RADIUS server by using the vendor-specific attribute
(attribute 26). Vendor-specific attributes (VSAs) allow vendors to support their own extended attributes
not suitable for general use. The Cisco RADIUS implementation supports one vendor-specific option by
using the format recommended in the specification. Cisco’s vendor-ID is 9, and the supported option has
vendor-type 1, which is named cisco-avpair. The Radius server is allowed to have zero or more SSID
VSAs per client.
In this example, the following AV pair adds the SSID batman to the list of allowed SSIDs for a user:
cisco-avpair= ”ssid=batman”
For instructions on configuring the access point to recognize and use VSAs, see the “Configuring the
Access Point to Use Vendor-Specific RADIUS Attributes” section on page 7-14.
Configuring Multiple Basic SSIDs
Access point 802.11a and 802.11g radios now support up to 8 basic SSIDs (BSSIDs), which are similar
to MAC addresses. You use multiple BSSIDs to assign a unique DTIM setting for each SSID and to
broadcast more than one SSID in beacons. A large DTIM value increases battery life for power-save
client devices that use an SSID, and broadcasting multiple SSIDs makes your wireless LAN more
accessible to guests.
Note Devices on your wireless LAN that are configured to associate to a specific access point based on the
access point MAC address (for example, client devices, repeaters, hot standby units, or workgroup
bridges) might lose their association when you add or delete a multiple BSSID. When you add or delete
a multiple BSSID, check the association status of devices configured to associate to a specific access
point. If necessary, reconfigure the disassociated device to use the BSSID’s new MAC address.
Requirements for Configuring Multiple BSSIDs
To configure multiple BSSIDs, your access points must meet these minimum requirements:
• VLANs must be configured
• Access points must run Cisco IOS Release 12.4(15)T or later
• Access points must contain an 802.11a or 802.11g radio that supports multiple BSSIDs. To
determine whether a radio supports multiple basic SSIDs, enter the show controllers
radio_interface command. The radio supports multiple basic SSIDs if the results include this line:
Number of supported simultaneous BSSID on radio_interface: 8
Guidelines for Using Multiple BSSIDs
Keep these guidelines in mind when configuring multiple BSSIDs:
• RADIUS-assigned VLANs are not supported when you enable multiple BSSIDs.
• When you enable BSSIDs, the access point automatically maps a BSSID to each SSID. You cannot
manually map a BSSID to a specific SSID.