Technical data

84 Meru System Director Configuration Guide © 2012 Meru Networks, Inc.
Multiple ESSID Mapping
Example for configuring the option to till association from IOSCLI:
Multiple ESSID Mapping
The following configuration example shows how to create three ESSIDs and map them
to three different VLANs to separate guest users, corporate users, and retail traffic.
The first ESSID, guest-users, is mapped to a VLAN named guest. This ESSID is config-
ured to use the default security profile, which requires no authentication method or
encryption method. The VLAN IP address is 10.1.1.2/24 with a default gateway of
10.1.1.1. The DHCP server IP address is 10.1.1.254. This ESSID is configured so that
it is added to each access point automatically and is also part of a Virtual Cell. (All
access points on the same channel with this ESSID share the same BSSID.)
The second ESSID, corp-users, is mapped to a VLAN named corp. This ESSID is config-
ured to use a security profile called corp-access, which requires 64-bit WEP for an
authentication/encryption method. The static WEP key is set to corp1. The VLAN IP
address is 10.1.2.2/24 with a default gateway of 10.1.2.1. The DHCP server IP
address is 10.1.2.254. This ESSID is configured so that it is added to each AP auto-
matically and is also part of a Virtual Cell.
The third ESSID, retail-users, is mapped to a VLAN named retail. This ESSID is config-
ured to use a security profile called retail-access, which requires 802.1X as an
authentication method. The 802.1X rekey period is set to 1000 seconds. The primary
Radius server IP address is set to 10.1.3.200, the primary Radius port is set to 1812,
and the primary Radius secret is set to secure-retail. The VLAN IP address is set to
10.1.3.2/24 with a default gateway of 10.1.3.1. The DHCP server IP address is
10.1.3.254. This ESSID is configured so that it is added to the access point with node
id 1 only. Also, the broadcasting of this ESSID value in the beacons from the access
point is disabled, and the ESS is given a BSSID of 00:0c:e6:02:7c:84.
Use the show vlan command to verify the VLAN configuration:
controller# show vlan
VLAN Configuration
VLAN Name Tag IP Address NetMask Default Gateway
guest 1 10.1.1.2 255.255.255.0 10.1.1.1
corp 2 10.1.2.2 255.255.255.0 10.1.2.1
retail 3 10.1.3.2 255.255.255.0 10.1.3.1
Now that the VLANs and security profiles have been created, the new ESSIDs can be
created and configured.
default# conf terminal
default(config)# essid assign
default(config-essid)# publish-essid-vport till-association
default(config-essid)# end