Cisco Wireless SSID broadcast restriction

Dear Team,
I have 12 Cisco 3602 access point and 2 Cisco 5508 WLC with HA. I want to create one new SSID which i do not need to broadcast in all pf my access point. I need to broadcast this SSID only with 3 of my access point. Kinldy advise, how will I achieve this.
Regards,
Jubair.S

Hello Jubair,
Yes, you can create new SSID and limit them to only 3 APs
For this
1. you have to create new WLAN profile for seperate SSID name
WLANs > Create New > Go
2. you have to create new group and then add all those APs in this group which you want to assign new SSID
and call newly created profile in this group as well, that's it.
WLANs > Advanced > AP Groups > Add Group

Similar Messages

Wireless SSID Broadcast?

When wireless SSID broadcast is DISABLED, does this prevent others in the area from seeing your network listed in the "view available wireless networks" list?

Thanks.
Forgot to ask: If a relative comes over and I let them hook into my network, will I have to ENABLE SSID for them to see it in order to log on?
Message Edited by AceH on 03-20-2008 02:21 PM

Router Cisco 891-w SSID BroadCast

i have successfully been able to configure my 891w router with a wireless network, but even when i allow the SSID to broadcast (Using the GUI option Enable Broadcast), as soon as i save the settings with the SSID broadcast enabled. it goes back to SSID broadcast not enabled.
Thanks

Hi,
This command should be entered inside the radio module..
Issue the command on the router
service module wlan-ap 0 session
U will go into the AP module..
here, configure the guest-mode
en
conf t
dot11 ssid
guest-mode
end
lemme know if this helps..
Regards
Surendra

Cisco Wireless - N E2500 Dual Band Router and Hide SSID

Hi,
I have tried to hide my SSID by dis-enabling The SSID broadcasts of first one then the other band.
Once I dis-enabled the SSID broadcast of the last band my laptop, which has the wireless card, would lose connection to the internet on reboot.
I have read somewhere but now cannot find the article, that one can hide ones SSID but that it requires some work to connect to a network that is no longer broadcasting.
Anyone have knowledge on how to go about this or maybe they could point me to a resource that discusses how to set this up....thanks.
Tom.
Solved!
Go to Solution.

Thanks Exotic Fish ... Do you no anything about the Dual Band.
I understand that we can only use one band at a time ... that is great ....so I have the 2.4Ghz connecting automatically.
When does the 5Ghz kick in ... if it does ... or do you have to manually connect to it?
Thanks.
Tom.

MacBook Pro will not connect to Cisco Wireless Network

I have just bought a brand new MacBook Pro, running Leopard (OSX 10.5.1) and I just cannot get it to connect to the Wireless Network at my workplace.
The MBP connects to wireless network and authenticates just fine, but will not obtain an IP address from the DHCP server.
The wireless network consists of 16 Cisco Aironet 1200 Access Points controlled by a Cisco Wireless Network Controller. It does not broadcast its SSID and is WEP 128-bit hex protected.
Changing the network from WEP to WPA is out of the question for me as this is under the control of my customers IT Department and they do not have any problems with their PCs connecting to the network. It appears to be an Apple issue.
For reference, my old Vaio PC, my Nokia N95 and my iPod Touch ALL connect to the same wireless network without any problems whatsoever, first time, every time!
If I boot into Windows XP from my Boot Camp partition, XP can connect wirelessly to the network without any problems, so it is not MacBook hardware related...
It has to be a bug in Mac OSX... doesn't it?!?
Things I have already tried (following suggestions on many forums):
* Switching Airport off/on
* Deleting various network-related Plist files and rebooting
* Manually assigning an IP Address (not really permitted but doesn't work anyway!)
* Disabling all network adaptors except Airport
AP Grapher shows that the MBP is connected to the wireless network, at good strength, and packets are being sent and received, but Internet Access is not possible as no IP Address has been assigned. Instead, my MBP shows a 169.* IP Address (self-assigned). It should be a 10.1.255.* address.
Can anybody please help? Thank you.

i posted this same reply elsewhere because it worked for me for my Buffalo wireless router: try manually setting your IP address instead of relying on DHCP, which sometimes (I don't know why) doesn't work well with Macs. It's a good get around. I am a happy Mac user but nothing is perfect on earth, and when the Mac gives problems, it does give a lot of frustration. Macs are not as easy to troubleshoot as Win because a Mac is built to be user friendly(and it works most of the time), meaning a lot of the background computing stuff is hidden away from users to avoid user accidentally upsetting some settings.
Unfortunately, the highly automated troubleshooting wizards provided by OS X are not perfect so when these software wizards fail to resolve the problem, like my Network Diagnostics, I have to spend more time tinkering around. There's "Terminal" of course but then most of us, especially PC converts to Macs, don't know how to use it.
You should also try updating your MBP, see if there are any new updates being released.

SSID broadcasts a secure network but no security configured

Hi,
I have a wireless network using Cisco 1231G AP's in autonomous mode. Each AP is configured with a guest VLAN and this points to a BBSM server.
The issue I'm having is the SSID for guest access is configured as open with no security parameters set. However, my client (CB21AG) sees the network being broadcast sometimes as open and other times as secure.
AP configuration:
ssid bbsm
vlan 295
authentication open
guest-mode
IOS Version: 12.2(13)JA4
Output captured from AP scan logs:
2008-10-01 12:43:36 ,bbsm,00:12:DA:A7:F5:30,-50,Secure,G,1
2008-10-01 12:43:36 ,bbsm,00:12:DA:A7:F3:B0,-71,Open,G,11
2008-10-01 12:43:36 ,bbsm,00:12:DA:AE:A7:B0,-78,Secure,G,2
2008-10-01 12:43:36 ,bbsm,00:12:DA:AE:7B:90,-91,Open,G,10
2008-10-01 12:43:36 ,bbsm,00:12:DA:B6:58:60,-91,Secure,G,13
2008-10-01 12:43:36 ,bbsm,00:12:DA:B6:66:F0,-92,Secure,G,13
2008-10-01 12:43:36 ,BTOpenzone,00:02:8A:A3:04:A4,-71,Open,B,6
2008-10-01 12:43:36 ,hpsetup,02:13:02:00:02:15,-88,Open,G,11
2008-10-01 12:43:36 ,Voyager test,00:16:E3:32:58:A9,-43,Open,G,5
2008-10-01 12:43:56 ,bbsm,00:12:DA:A7:F5:30,-52,Secure,G,1
2008-10-01 12:43:56 ,bbsm,00:12:DA:A7:F3:B0,-69,Secure,G,11
2008-10-01 12:43:56 ,bbsm,00:12:DA:AE:A7:B0,-77,Secure,G,2
2008-10-01 12:43:56 ,bbsm,00:12:DA:AE:7B:90,-89,Secure,G,10
2008-10-01 12:43:56 ,bbsm,00:12:DA:B6:58:60,-91,Secure,G,13
2008-10-01 12:43:56 ,bbsm,00:12:DA:B6:66:F0,-92,Secure,G,13
2008-10-01 12:43:56 ,bbsm,00:12:DA:AE:9B:00,-93,Secure,G,5
2008-10-01 13:20:36 ,bbsm,00:12:DA:A7:F5:30,-52,Open,G,1
2008-10-01 13:20:36 ,bbsm,00:12:DA:A7:F3:B0,-67,Open,G,11
2008-10-01 13:20:36 ,bbsm,00:12:DA:B6:58:60,-91,Open,G,13
2008-10-01 13:20:36 ,bbsm,00:12:DA:AE:A7:B0,-75,Open,G,2
2008-10-01 13:20:36 ,bbsm,00:12:DA:AE:7B:90,-94,Open,G,10
2008-10-01 13:20:36 ,BTOpenzone,00:02:8A:A3:04:A4,-69,Open,B,6
2008-10-01 13:20:36 ,Voyager test,00:16:E3:32:58:A9,-40,Open,G,5
Any ideas or help on why I sometimes see the ssid broadcast as secure?
Thanks
Simon

It is one of mine. Yes. It connects to it no problem, just doesn't connect to the actual internet. Network diagnostics has all green lights until the ISP and/or Internet point. If I walk through diagnostics, it will get to the point where it says that the network requires a WEP password. I don't know why it does that because my network is not password-protected (husband claims it doesn't work well with his VPN system to get into work network). If I leave it blank, the connection will work. Eventually, after the computer is put to sleep, I will have the same problem upon waking up. I just tried renaming the network and removing all preferred networks and rebooting. Let's see how that works.

Wireless SSID in ACS

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
Hi,
I want to do the restriction on the bases of SSID. I have two SSID on Wireless LAN controller and all authentications are happing through Active directory through ACS. ACS is integrated with Active directory.
Objective is to restrict the users, I want that GROUP-A users can only login on SSID-A and GROUP-B user only login on SSID-B.
GROUP-A users could not login to SSID-B and GROUP-B users could not login to SSID-A
Is it possible in ACS to apply the restriction on the basis on SSID or any other workaround?
Regrds,
Vashdev

Vashdev,
Yes, SSID base restriction is possible with Cisco acs, please configured the GROUP-A and GROUP-B with their respective SSID like (*ssid) as mentioned in the below listed configuration example.
Restrict WLAN Access based on SSID with WLC and Cisco Secure ACS Configuration Example
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml
Regds,
JK
Do rate helpful posts-

IPod Touch - WiFi - SSID Broadcast Works/SSID No Broadcast Doesn't Work

This is maddening in so many different ways:
I have two (2) 2nd Generation iPod Touch 8Gb products. Both are nearly identical in every way -- how they connect, OS, Library, similar Apps (but not the same all the time), etc.
iPod Touch "A" works flawlessly. No issues, no problems, no complaints
iPod Touch "B" started behaving badly by first loosing my WPA security but recognizing my home network. Strong password creation was a hassle but I got cleaver. Over time, it got worse to the point that it would not even recognize the existence of my 802.11g home network.
CAVEATS 1) We live in a rural area and on my property, not another network can be found. 2) Plenty of 2.4 Ghz stuff around including other wireless computers but... 3) This is my profession and I am flummoxed but have ideas....
FINDINGS: 1) iPod "B" works fine in the public space. All wireless networks work just fine and dandy. 2) I turn on my home network SSID BROADCAST and this iPod works fine (after being set up again). 3) Turn off SSID Broadcast and once this iPod sleeps or is turned off/on, no more network but go to any place that has a public broadcast SSID and no security and it's fine again... 4) No matter what I have and what I do, iPOD "A" works flawlessly.
WHAT I HAVE DONE: 1) made sure that I have plenty of DHCP scope -- yup. 2) Checked my leases - when connected I see perfectly valid MACs and leases without incident. 3) Check for overlapping or conflicts in IP Address allocation and MAC addresses (you never know...) - no problems there. 4) Quadruple checked "A" vs. "B" settings -- identical. 5) Dumped the entire flash and OS and started with a clean slate -- same issues with no apps, music, photos, movies -- nada... just a raw iPod like it came out of the box... same problem 6) Asked Apple to replace it as it's under warranty -- done. 7) Started testing again as a clean slate and found that it worked... replacing the iPod did the trick...
So, I "RESTORE" the iPOD to garner all the hard work that was put into it -- contacts, settings, etc. I "SYNCH" the iPOD to recover my angel's precious photos, apps, movies, music.... I return it back to it's originally desired state EXCEPT that one must completely reconfigure things like networking by hand -- OK.
It's back to normal, as desired, in the configuration we want and it WORKS!!!! Albeit... only for a day... and now we are back to where we started -- again...
iPod "A" works flawlessly and the new "B" is back to it's same old tricks --
OK - What does a restore do anyway? Is there some small pile of firmware that writes over the fresh load from OS? In order to preserve my contacts and other things a restore supports, did I uncover the super secret bug that Apple will refuse to acknowledge? Can I still say that I hate iTunes without being flamed a thousand deaths? Is there a diagnostic easter egg I can try?
And before I started this soliloquy -- I watched my functioning iPod "B" go to sleep with a working home network... only to wake her from her slumber... tuned out - with Not Connected living in her Wi-Fi field.... <sigh - simply maddening>
The only thing that sets these two apart are the nuances associated with configs that are part of the user's own personal interface desires and resident app input (contacts, calendar, etc...).
AGE

First off -- thank you all for replying and providing your insight, stories, and findings with your own iPod Touch, MAC, and iPhone WiFi fun...
You are all wonderful contributors.
Just to be clear, as others have mentioned -- this is not a feature and we should not have to tolerate it. This iPod, like the other one and yours too, once worked flawlessly and then continued to degrade to a point of not functioning according the 802.11g ieee standard. Something that has been in development for over 10 years and has been an adopted standard in consumer electronics for more than 7 years -- an eternity in this industry.
To be clear, I performed TWO ultimate resets -- completely wiping the firmware and OS of the original hardware and tested a completely wiped iPod Touch to no avail and the second "reset" was a brand new replacement -- right out of the box -- under warranty. No network resets necessary. The new iPod worked as expected without any original data loaded. Once a backup was "restored," and the iPod was synch'd with the library of choice, then the troubles started again. The networking does not restore -- you have to build a secure network from scratch. And again, the "A" iPod exhibits none of this odd behavior.
It is a testament that Apple has a problem in code when other iPods running similar OS behave the same. The reason that I mention the geeky standard above is because we should not have to broadcast our SSID for this to work -- it's an open standard, not something proprietary. We should not have to conform to "work around" solutions. And, yes, NOT broadcasting SSID is part of the entire package of sound security. I have to strongly disagree with all the nay-sayers. You don't go walking around the streets with money hanging out of your pockets or your wallet sticking out of your shirt pocket for a reason -- but I bet that you have cash on you and I can find it pretty quickly. It's why purse snatching is a crime of violence and rampant in larger cities and pick-pockets use finesse. One is easy pickings for anyone to try and the other requires tools and skills. If you don't flaunt it, the low level threat is removed.
As for strong security, the option for WEP is not an option. I use multiple levels of acceptable stronger encryption, logging, limited DHCP scopes, MAC controls at times, stateful firewall controls, and other radio tricks of the trade. My only failings is having to pander to the lowest common denominator within my home network.
Anyway, I spent a bit more time surfing and find this problem ubiquitous in 2.2.1 and forward. Something is amiss at Apple. All my Window based products work just fine (as does my Wii).
Keep those cards and letters coming folks.
AGE

Cisco wireless and Apple Mac woes

Hello all,
I've been working with Cisco wireless and WLC's for a couple of years now but the recent onslaught of Apple Mac's is giving me heart burn. I've seen this at numerous sites now and need to throw it to eht community for guidance.
Basically we have had a number of instances where the Macs just fall off the wifi. Sometimes it's when they wake from sleep and other times when roaming between AP's (1131s with same SSID's). Our standard install is WPA2 and per ap local authentication. PC's work fine and never an issue.
We have completed a survey with a spectrum analyser and no RF interefence is present nor errors on the radio interface.
Questions:
- Is there a preferred Cisco config/setup for Mac's to work reliably? I've heard loads of rumors but nothing concrete and nor can I find anything specific.
- Should I be setting up WDS in case there is an authenticating issue.
- For those who are Mac gurus and happen to be reading. What Mac options we should look at?
This has all come to a head because the clients IT company who recommended the Macs (different from us doing the network infrastructure) are insisting that the problem is Cisco incompatibility and that we should rip out the Cisco kit and install airports (what tha!!!).
Thanks in advance for any pointers.
For those who like a config here it is .... Vanilla stuff really
Building configuration...
Current configuration : 2236 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP4
no logging console
enable secret xxxxxxxxxxxxxxxxx
no aaa new-model
dot11 syslog
dot11 ssid Home
   vlan 1
   authentication open
   authentication key-management wpa
   guest-mode
   mbssid guest-mode
   wpa-psk ascii xxxxxxxxxxxx
dot11 ssid avnet
   vlan 2
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii xxxxxxxxxxxxxxxx
username abcd password 1234
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 1 mode ciphers tkip
encryption vlan 2 mode ciphers tkip
ssid Home
mbssid
speed basic-1.0 basic-2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2412
station-role root
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 80 in
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
interface BVI1
ip address 192.168.10.54 255.255.255.0
no ip route-cache
ip default-gateway 192.168.10.1
no ip http server
no ip http secure-server
bridge 1 route ip
line con 0
line vty 0 4
login local
end

Yeah!! even i have come across multiple issue with MAC and Cisco.. these are the below settings which i normally do on the cisco gears and most of the times this solved the issue..
on the IOS AP disable Aironet Extentions and set the poer local and ofdm to max
no dot11 extension aironet
power local cck max
power local ofdm max
end
On the WLC, disable Aironet IE..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

SSID Broadcasting even when disabled

I have two 5508 wireless controllers with two WLANS. One is public and SSID broadcasting is enabled. The other is our secured network and was configured with broadcasting disable. When looking at the controlling both through prime and on the controller itself, broadcasting is still not enabled, however the SSID is showing up in the available networks list on our computers. We haven't changed anything on the wireless network for quite a long time and this is a recent discovery. Anyone know how to remedy this situation?

Id like to add.
Your PCs that show the SSID mean they are configured for that WLAN. This is why you see it someone configure these clients for this WLAN.
If you have devices not seeing this its becuase they havent been configure for it.
As for the 'hidden' you need to mark this if your wlan is not broadcasting the SSID. No checky checky no worky worky ..
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

How to enable SSID broadcast? (E4200 Cloud f/w)

I got E4200 v.2 with the latest cloud firmware. On the previous (non-cloud) firmware there was an option to enable or disable SSID broadcast, and I disable it. Now I want to enable it back, but can not find this option in Cisco Connect Cloud.
So there is a question: how to enable SSID broadcast on the E4200 v.2 with Cisco Connect Cloud firmware?
wbr, bg

In your case, you need to reset the router to factory defaults, at which point the SSID will be set to broadcast and it cannot be disabled. To know more about why there is no option to disable the SSID broadcast anymore on the Cloud firmware, click here.

How to stop SSID broadcasting

Where do I find the option to stop SSID broadcasting in my Actiontec MI424WR Rev. F Router?
The user guide is located here:
http://onlinehelp.verizon.net/consumer/bin/pdf/ActiontecMI1424WRUserManual.pdf
and it shows where that option is but the screens in the manual do not match the screens you see when you login into the router (not even close). I looked through every screen while logged into the router and I could not find it. I would expect it to be a check box to turn broadcasting on or off in the same screen that you assign the SSID name but the option is not there.
In addition, where can I find a link to download the user guide that matches this router?
I wanted to email Verizon tech support to ask them this but they do not accept email questions concerning Wireless issues. They should accept email questions about any issues concerning their equipment. I tried thrie chat support a few times but it keeps saying it is unavailable even during the listed hours of operation.
Thanks to anyone who can help me out.
Solved!
Go to Solution.

The following FAQ will help you
http://www.dslreports.com/faq/11468
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

WRT54G with USB11 v 2.6: Can't automaticaly reconnect after SSID broadcast disabled

Hi All,
I'm trying to make my network more secure. I've done all the basics, including disabling the SSID broadcast. The only problem is that after a few hours, I lose connectivity on the USB 11 wireless adapter and have to directly connect to the router via a cat 5 cable and reset the SSID to broadcast, which causes my network to find it and logs in. I reset the SSID broadcast to disable and get a few more hours of conenctivity until it drops again.
My router is ver 2.0 and my adapter is 2.6. This is the first time in 4 years I've had any probs with my wireless network.
My PC is brand new and pretty mid-high-end. Intel duo-core, 2 GB ram, etc...
Any help would be appreciated.

Best thing is to just enable SSID. It's a myth that disablling helps with security, it does for the average joe... a bit. but not really.
I found a great article about how disabling SSID doesn'treally do much for security at all, but i can't seem to laocte ti right now. I was googling wireless security stuff about a month or so ago, guess i should have bookmarked that one.

Cisco Wireless LAN Controller Always disconnect

Dear All,
Please help to assist my issue.I used Cisco Wireless LAN Controller model: 5508 with version 7.0.98.0 and I got issue with connection always disconnect ping always loss or some time client can't get DHCP from Controller.
- I configure as Internal DHCP Server with 1 SSID.
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/110865-dhcp-wlc.html
- DHCP least is not full and I also try to clear-lease all but still not work.

1. Config dhcp proxy enable
2. In case of internal Dhcp, try debug for clients
using,
debug client <MAC ADDRESS OF CLIENT>

Survey fail even with SSID broadcast

I fail the initial survey every time I try with the WRE54G. No wireless networks show up - and I get over 20 when I try with other devices. I usually have SSID broadcast disabled, but have enabled it on the WRT54G router when setting up the RE. Any advice?Thanks in advance!

Hi,
Just make sure that the range expander is properly configured and well synchronized with the router , and make sure that the ssid broadcast on the range expander is also enabled.

Cisco Wireless SSID broadcast restriction

Similar Messages

Maybe you are looking for