Interface Dot11Radio0/0/0 no ip address | Cisco Systems OL-6415-04

Chapter 3 Configuring Multiple SSIDs

Enabling MBSSID and SSIDL at the same time

!

dot11 ssid 1841-tkip-psk vlan 2 authentication open authentication key-management wpa wpa-psk ascii 0 12345678 information-element ssidl advertisement

!

dot11 ssid 1841-aes-psk vlan 3 authentication open authentication key-management wpa wpa-psk ascii 0 12345678 information-element ssidl advertisement wps

!

interface Dot11Radio0/0/0 no ip address

no snmp trap link-status

!

encryption vlan 1 key 1 size 128bit 0 12345678901234567890123456 transmit-key encryption vlan 1 key 2 size 128bit 0 12345678901234567890123456 encryption vlan 1 mode ciphers wep128

!

encryption vlan 2 mode ciphers tkip

!

encryption vlan 3 mode ciphers aes-ccm

!

ssid 1841-wep128

!

ssid 1841-tkip-psk

!

ssid 1841-aes-psk

!

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root

Cisco Wireless ISR and HWIC Access Point Configuration Guide

	OL-6415-04	3-9

Image 63

Cisco Systems OL-6415-04 manual Interface Dot11Radio0/0/0 no ip address

Contents

Text Part Number 0L-6415-04 Corporate HeadquartersPage N T E N T S Ssid Configuration Methods Supported by Cisco IOS Releases Creating Cipher Suites Protocol Filters Local Authenticator Messages Contents Cisco Wireless Router and Hwic Configuration Guide Preface provides information on the following topics PrefaceAudience Purpose Conventions Organization Preface Conventions Cisco Product Document Title Related Publications Cisco.com Obtaining Documentation Documentation Feedback Product Documentation DVDOrdering Documentation Cisco Product Security Overview Reporting Security Problems in Cisco Products Submitting a Service Request Obtaining Technical AssistanceCisco Technical Support & Documentation Website Obtaining Additional Publications and Information Definitions of Service Request Severity Preface Obtaining Additional Publications and Information Overview Wireless Device Management Root Unit on a Wired LAN Network Configuration Example Features Overview Features Overview Overview Cisco Wireless Router and Hwic Configuration Guide Configuring Radio Settings Cisco Role in Radio Network Eries ISRs Command PurposeEnabling the Radio Interface Roles in Radio Network Configuring Network or Fallback Role Bridge Features Not Supported Sample Bridging ConfigurationFollowing is a sample of a Root Bridge Configuration Following is a sample of Non-Root Bridge Configuration Interface Dot11Radio0/1/0 no ip address Configuring Universal Client Mode Universal Client Mode Following configuration is supported on NAT NAT Network Address TranslationVirtual interface to aid NAT translation No service password-encryption Hostname C1803WUC Configuring Radio Settings Configuring Radio Data Rates Configuring Radio Data Rates 2.0 5.5 6.0 9.0 Throughput ofdm defaultSpeed 11.0 2.0 5.5 basic-1.0 100 125 150 200 250 Configuring Radio Transmit PowerEnd Return to privileged Exec mode DBm Maximum Limiting the Power Level for Associated Client DevicesPower local 5 6 7 10 13 15 17 10 20 30 50 Maximum Configuring Radio Channel SettingsPower client 20 30 50 100 maximum Regulatory Domains 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 CenterChannel Identifier MHz 2472 2484 Channel GHz Channels on Which DFS is Automatically Enabled DFS Automatically Enabled on Some 5-GHz Radio Channels Blocking Channels from DFS Selection Enabling and Disabling World ModeConfirming that DFS is Enabled This example shows how to unblock all frequencies for DFS Enabling and Disabling Short Radio Preambles Antenna transmit Configuring Transmit and Receive AntennasAntenna receive Diversity left right Disabling and Enabling Access Point Extensions Disable Access Point extensionsNo dot11 extension aironet Snap dot1h Snap or 802.1h dot1h, the default settingPayload-encapsulation Set the encapsulation transformation method to RFC1042 Configure terminal Enter global configuration mode Enable PspfBridge-group group port-protected Configuring Protected Ports Configuring Beacon Period and Dtim Rts retries value Configuring RTS Threshold and RetriesConfiguring Maximum Data Retries Rts threshold value Fragment-threshold value Configuring Fragmentation ThresholdBytes for the 2.4-GHz radio. Enter a setting from 256 to Enabling Short Slot Time for 802.11g Radios Performing a Carrier Busy Test OL-6415-04 Configuring Multiple SSIDs Ssid Configuration Methods Supported by Cisco IOS Releases Understanding Multiple SSIDsVlan Creating an Ssid Globally Configuring Multiple SSIDs Command Purpose Using a Radius Server to Restrict SSIDs Viewing SSIDs Configured GloballyUsing Spaces in SSIDs Configuring Multiple Basic SSIDs Requirements for Configuring Multiple BSSIDsGuidelines for Using Multiple BSSIDs Information-element ssidl CLI Configuration ExampleDisplaying Configured BSSIDs Enabling Mbssid and Ssidl at the same time Below is a sample configuration for enabling Ssidl Sample Configuration for Enabling Mbssid and SsidlUse the no form of the command to disable Ssidl IEs Below is a sample configuration for enabling Mbssid Interface Dot11Radio0/0/0 no ip address OL-6415-04 Configuring an Access Point as a Local Authenticator Configure a Local Authenticator Understand Local Authentication Aaa new-model Enable AAA Guidelines for Local AuthenticatorsConfiguration Overview Configuring the Local Authenticator Access Point Ssid ssid Reauthentication time secondsRadius-server local Vlan vlan Mac-auth-only Password nthash password This example shows how to set up EAP-FAST authentication End Routerconfig# aaa new-model Configuring PAC Settings Configuring EAP-FAST Settings Configuring an Authority ID Configuring Server KeysPossible PAC Failures Caused by Access Point Clock Unblocking Locked Usernames Limiting the Local Authenticator to One Authentication TypeViewing Local Authenticator Statistics This example shows local authenticator statistics Using Debug Messages Understand Encryption Types, Configure Encryption Types, Configuring Encryption Types Understand Encryption Types Creating WEP Keys Configure Encryption Types Key Security Configuration WEP Key RestrictionWEP Key Restrictions Encryption Example WEP Key Setup Access Point Associated Device Slot Transmit? Key ContentsCreating Cipher Suites Cipher Suites Compatible with WPA Enabling and Disabling Broadcast Key Rotation Compatible Cipher SuitesWPA Security Security Type in Universal Client Mode Universal client configuration Tkip AES TKIP+AESWEP 40-bit WEP 128-bit Caveats Debugging WEP OL-6415-04 Configuring Authentication Types Open Authentication to Access Point Understand Authentication Types Traffic from client Shared Key Authentication to Access Point Sequence for EAP Authentication EAP Authentication to Network MAC Address Authentication to the Network Using WPA Key Management Combining MAC-Based, EAP, and Open Authentication 5shows the WPA key management process Protocol Required? Systems WPA-PSK Mode Windows XP YesSoftware and Firmware Requirements for WPA and WPA-TKIP Third Party Host Supplicant Assigning Authentication Types to an Ssid Configure Authentication Types Optional eap list-name Authentication openOptional Set the authentication type to open for this Ssid Mac-address list-name alternate Mac-address list-name Authentication sharedAuthentication network-eap Authentication key-management Configuring WPA Migration Mode Wpa-psk hex ascii 0 Configuring Additional WPA Settings Configuring MAC Authentication Caching Server Dot1x client-timeout secondsDot11 holdoff-time seconds Dot1x reauth-period seconds Security Feature Client Setting Access Point Setting Detects two MIC failures within 60 seconds, it blocks allTkip clients on that interface for the holdtime period WPA-PSK Security Feature Client Setting Access Point Setting Configuring Radius Servers Understanding Radius Configuring and Enabling Radius Radius Operation Default Radius Configuration Configuring Radius Identifying the Radius Server Host Radius-server host hostname Acct-port port-number timeoutPort for authentication requests.Optional For acct-port Radius-server timeout command is used Show running-config Verify your entries Configuring Radius Login Authentication Include-in-access-req format %h Aaa authentication login defaultLogin authentication default Authentication login command Defining AAA Server Groups Define the AAA server-group with a group name Port for authentication requestsPort for accounting requests Aaa group server radius group-name Radius Starting Radius Accounting Configuring Settings for All Radius Servers Selecting the Csid FormatOption MAC Address Example Show running-config Verify your settings Authentication Radius-server vsa send accountingRadius-server host hostname ip-address non-standard Radius-server key string Configuring WISPr Radius Attributes Snmp-server location location Displaying the Radius Configuration Attribute ID Description Radius Attributes Sent by the Access Point VLAN-ID VSA attribute NAS-Location Disc-Cause-Ext Acct-Terminate-Cause Configuring VLANs Understanding VLANs Related Documents LAN and Vlan Segmentation with Wireless Devices Incorporating Wireless Devices into VLANs Configuring VLANs Interface dot11radio 0.x Configuring a Vlan Encapsulation dot1q vlan-id Creating a Vlan Name Using a Radius Server to Assign Users to VLANsGuidelines for Using Vlan Names Assigning Names to VLANs Viewing VLANs Configured on the Access Point Ssid Vlan ID Vlan Configuration Example Vlan 1 Interfaces Vlan 2 Interfaces Vlan 3 Interfaces Configuring Vlan Configuring VLANs Vlan Configuration Example OL-6415-04 Understanding QoS for Wireless LANs, Configuring QoS, Configuring QoS Understanding QoS for Wireless LANs QoS for Wireless LANs Versus QoS on Wired LANsImpact of QoS on a Wireless LAN Upstream and Downstream Traffic Flow Precedence of QoS Settings Using Wi-Fi Multimedia Mode Fixed Slot Time Configuring QoSConfiguration Guidelines Adjusting Radio Access Categories Disabling Igmp Snooping Helper Sample Configuration Using the CLI Japan Channel SettingsIeee 802.11b 2.4-GHz Band Center Frequency Americas Americas -A Emea -E Japan -J Frequency Ieee 802.11g 2.4-GHz BandIeee 802.11a 5-GHz Band Center Regulatory Domains Frequency North America OL-6415-04 Protocol Filters Protocol EGP PUP Chaos IcmpIgmp TCP ISO Designator IMAP2 TsapPOP2 POP3 CVS RIPRPC Uucp Supported MIBs MIB ListIEEE802dot11-MIB RFC1213-MIB RFC1398-MIB SNMPv2-MIB SNMPv2-SMI SNMPv2-TC Using FTP to Access the MIB Files Level Description Error and Event MessagesHow to Read System Messages This appendix lists the CLI error and event messages Association Management Messages Explanation a station associated to an access pointExplanation a station disassociated from an access point Message Traceback Reports Subsystem Messages Recommended Action None Explanation The device has begun its DFS scanning process Recommended Action None Error Message DOT11-4-RMINCAPABLE Interface interface Recommended Action Reload the system Error Message DOT11-4-CANTASSOC Cannot associate characters Recommended Action None Recommended Action Local Authenticator Messages Operating in the 2.4-GHz band Network with wireless stationsWireless network composed of stations without Access Points Access Point GL-2 Hoc mode Corresponding IP addresses LAN 802.11 specificationsWired Ethernet network An antenna that radiates its signal in a spherical pattern Transmission at 2 Mbps Transmission at 6, 9, 12, 18, 24, 36, 48, and 54 Mbps That of a cable While maintaining an unbroken connection to the LAN Wireless MultiMedia Computing device with an installed client adapter802.1X for authenticated key management AES-CCMP EAP IN-2 EAP-FAST 1 Leap FTP Names, Vlan Network-EAP OfdmQbss Radius RFC Guest mode Multiple SSIDs Support Using spacesLocal authentication Names Ssid 4 Vlan command 4 Regulatory Domains WPA migration mode Wpa-psk command World-mode command IN-7 IN-8 IN-9 IN-10 IN-11 IN-12 IN-13 IN-14