4-21
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-11350-01
Chapter4 Configuring the Access Point for the First Time
Configuring Basic Security Settings
Express Security Limitations
Because the Express Security page is designed for simple configuration of basic security, the options
available are a subset of the wireless device’s security capabilities. Keep these limitations in mind when
using the Express Security page:
•If the No VLAN option is selected, the static WEP key can be configured once. If you select Enable
VLAN, the static WEP key should be disabled.
•You cannot edit SSIDs. However, you can delete SSIDs and re-create them.
•You cannot assign SSIDs to specific radio interfaces. The SSIDs that you create are enabled on all
radio interfaces. To assign SSIDs to specific radio interfaces, use the Security SSID Manager page.
•You cannot configure multiple authentication servers. To configure multiple authentication servers,
use the Security Server Manager page.
•You cannot configure multiple WEP keys. To configure multiple WEP keys, use the Security
Encryption Manager page.
•You cannot assign an SSID to a VLAN that is already configured on the wireless device. To assign
an SSID to an existing VLAN, use the Security SSID Manager page.
•You cannot configure combinations of authentication types on the same SSID (for example, MAC
address authentication and EAP authentication). To configure combinations of authentication types,
use the Security SSID Manager page.
Using the Express Security Page
Follow these steps to create an SSID using the Express Security page:
Step1 Type the SSID in the SSID entry field. The SSID can contain up to 32 alphanumeric characters.
Step2 To broadcast the SSID in the wireless device beacon, check the Broadcast SSID in Beacon check box.
When you broadcast the SSID, devices that do not specify an SSID can associate to the wireless device.
This is a useful option for an SSID used by guests or by client devices in a public space. If you do not
broadcast the SSID, client devices cannot associate to the wireless device unless their SSID matches this
SSID. Only one SSID can be included in the wireless device beacon.
Step3 (Optional) Check the Enable VLAN ID check box and enter a VLAN number (1 through 4095) to assign
the SSID to a VLAN. You cannot assign an SSID to an existing VLAN.
Step4 (Optional) Check the Native VLAN check box to mark the VLAN as the native VLAN.
Step5 Select the security setting for the SSID. The settings are listed in order of robustness, from No Security
to WPA, which is the most secure setting. If you select EAP Authentication or WPA, enter the IP address
and shared secret for the authentication server on your network.
Note If you do not use VLANs on your wireless LAN, the security options that you can assign to multiple
SSIDs are limited. See the “Using VLANs” section on page 4-18 for details.
Step6 Click Apply. The SSID appears in the SSID table at the bottom of the page.