Multiple ssid's same key ?

i am deploying (1) 1242ag as root-bridge with multiple vlans and ssids but have left the key the same for each ssid/vlan. the remote (4) 1242ag's will be configured as work-group bridges with 1 vlan & 1 ssid for each. The key will be the same on all devices.
Is this recommended? how would it be better set up? or is it fine this way.

Are you referring to the WEP key. Using this method is not scalable and also not secure. Use a authentication mechanism like EAP which will generate per session keys.

Similar Messages

  • Getting Multiple Records with Same Key throws Access Violation

    Are there any known issues with PInvoke Signatures for GET .. Im gettign consistently AVL's when attempting to read Multiple Values under single key ..
    Error doesn't happens while debugging in VS 2007 , Tried turning off optimizations with no luck ..
    Im using VS 2010 and .NET 4.0 ( WIN XP) . I do have a repro. ( Im using latest bits from Oracle site as of 9/10/2010 )
    Unhandled Exception: System.AccessViolationException: Attempted to read or write
    protected memory. This is often an indication that other memory is corrupt.
    at BerkeleyDB.Internal.libdb_csharpPINVOKE.db_strerror(Int32 jarg1)
    at BerkeleyDB.DatabaseException..ctor(Int32 err) in C:\Users\gmf\db\db-5.0.26
    \csharp\DatabaseException.cs:line 78
    at BerkeleyDB.DatabaseException.ThrowException(Int32 err) in C:\Users\gmf\db\
    db-5.0.26\csharp\DatabaseException.cs:line 34
    at BerkeleyDB.Internal.DB.get(DB_TXN txn, DatabaseEntry key, DatabaseEntry da
    ta, UInt32 flags) in C:\Users\gmf\db\db-5.0.26\csharp\Internal\DB.cs:line 187
    at BerkeleyDB.BaseDatabase.Get(DatabaseEntry key, DatabaseEntry data, Transac
    tion txn, LockingInfo info, UInt32 flags) in C:\Users\gmf\db\db-5.0.26\csharp\Ba
    seDatabase.cs:line 900
    at BerkeleyDB.Database.GetMultiple(DatabaseEntry key, Int32 BufferSize, Trans
    action txn, LockingInfo info) in C:\Users\gmf\db\db-5.0.26\csharp\Database.cs:li
    ne 494
    at helloworld.Program.Main(String[] args) in C:\bdm\helloworld\helloworld\Pro
    gram.cs:line 53
    Appreciate any help.
    Thanks
    Nirmal
    Edited by: user8050299 on Sep 10, 2010 3:29 PM
    Updated with OS

    seems like oracle .NET bindings doesnt work for new CLR . It works fine with .NET 2.0
    May be Oracle folks will release new version for 4.0

  • Same SSID with same Key at multiple facilities

    I have 4 881 routers at 4 different buildings. All of them use the SSID Network1 with a key of N3tw0rk1. If a user connects at one facility, he cannot connect at another facility without erasing the wireless connection, then creating a new one with the exact information that was in the original. The 881s are all set up completely the same.
    Anyone have any ideas as to why we have to go through this ridiculous process?

    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin-top:0cm;
    mso-para-margin-right:0cm;
    mso-para-margin-bottom:10.0pt;
    mso-para-margin-left:0cm;
    line-height:115%;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;
    mso-bidi-font-family:"Times New Roman";
    mso-bidi-theme-font:minor-bidi;}
    jasonww04
    For clarification, when you say no connection, do you mean that the wireless client doesn’t associate to the access point or it associates but you can’t pass traffic?
    I suspect the issue is going to be with the client and probably related to ARP or DHCP (possibly lease times depending on whether or not the laptop is put to sleep as opposed to shut down), possibly also a setting on the wireless setup on the laptop (on some wireless client software you can define what AP to associate too)
    Does turning disabling/re-enabling the radio via the wireless power switch on the laptop fix the problem?
    The fact that you’re using different subnets at each site shouldn’t prevent the client associating to the access point component of the router as it’s only a layer 2 device and therefore can only restrict based on MAC address (not IP, the router however can)
    Additionally, since rebuilding the client profile to exactly the same detail fixes the problem this would identify that the issue relates to the client not the wireless router.

  • Need to concatonate multiple values for same key columns into one string

    Hi...I'm attempting to use PL/SQL to read through a table containing more than one column value for a set of keys, and concatonate those values together into one string. For example, in the STUDENT table, for a STUDENT_ID there are multiple MAJORS_ACCOMPLISHED such as History, Biology and Mathematics. Each of the majors is stored in a different row with the same STUDENT_ID due to different faculty DEPARTMENT values.
    I want to read through the table and write out a single row for the STUDENT_ID and
    concatonate the values for MAJORS_ACCOMPLISHED. The next row should be another STUDENT_ID and the MAJORS ACCOMPLISHED for that student..etc.
    I've hit a wall trying to use cursors and WHILE loops to get the results I want. I'm hoping someone may have run across this before and have a suggestion. Tks!!

    I think you are looking for string aggregation.
    The following are the replies posted by me in the forum recently on the same case.
    they might help you.
    Re: Concatenating multiple rows in a table - Very urgent - pls help
    Re: Doubt in a query ( Urgent )
    Re: How to remove words which consist of max 2 letters?
    Re: output like Name1,Name2,Name3...

  • Using multiple SSIDs with same name but different PSKs

    I have a central WLC 2504 controller that is being used for remote site FlexConnect 1141 APs. They all advertise three different SSIDs. One SSID is a global SSID that is the same at every office. One is a hidden SSID using 802.1x machine auth.
    The one I am trying to get working is the local office guest network. These SSIDs are all the same at each office but should have different PSKs. They are local to the office, therefore would only ever be applied to a specific FlexConnect group.
    I understand why in theory this is generally not a good idea but given these are for remote sites I'd like it to be possible. I always get this message though:
    "WLAN with duplicate SSID and L2 security policy found"
    Is there a way around this? New WLC code that allows it maybe?

    I was able to configure three (more I think possible) WLANs with same SSID name and all are WPA2-AES-PSK on the same WLC and all are enabled at hte same time.
    Note that you can not have any of those broadcasting on same AP group. Each WLAN can be only broadcasted on a separate AP group. For your sites, It will probably need you to define an AP group for each site to broadcast different WLANs on different sites.
    You can do that if all your WLANs have an ID of 17 or higher. (the reason is, WLANs of 1-16 are by default broadcasted on the default AP group. and because those can not be on the same AP group - including the default one - then you can't have them with WLAN IDs 1-16. i.e on same - default - AP group)
    HTH
    Amjad
    rating useful replies is more useful than saying "Thank you"

  • Multiple SSID's on the same subnet?

    Can you have Multiple SSID's on the same subnet?
    SSID1 authenticates clients via radius.
    Our corporation bought printers with wireless cards that only support WPA-PSK so we created SSID2 for the printers. We can connect to both SSID's and ping from SSID1 to SSID2 but we can not perform other functions such as view the printer management interface with a browser. Should it be possibe to communicate between SSID1 and SSID2 on the same subnet?

    Yes you should have no issue, but the only thing is that you are using a lower security method... so either you put them on different subnets so you can control the traffic via acl's or might as well use the same security method to make it easier. The fact that you can ping sounds like you should be able to http to the device.

  • How can I create a hashmap() with multiple values for the same key?

    I am trying to write an application that will us something like a Map() with multiple values but some have the same key. Is this possible?

    i had the same question. just create a List, add all the values u want to it, and then put the List into the map like u would a normal single value. e.g.
    List list = new ArrayList();
    list.add(value1);
    list.add(value2);
    map.put(key, list);
    i bet u r doing the same course as i am =)

  • Multiple records are present for same key in lookup DSO

    Hi,
    I want to populate quantity value from lookup dso in target dso. I have written code to populate it in start and end routine. While populating value in target It is taking first value of quantity. there are two records in lookup and target DSO with same key and different Quantity value. there is not any common key field in lookup and target dso. So that I can not populate correct values in the target DSO.
    Can anyone suggest me for this?

    Hi All,
    I have written below code for populating Qty:
        LOOP AT RESULT_PACKAGE ASSIGNING <RESULT_FIELDS>.
          IF <RESULT_FIELDS>-/BIC/ZSHPCRTID IS NOT INITIAL.
            CLEAR  : WA_ITAB.
    READ TABLE IT_ITAB TRANSPORTING NO FIELDS WITH KEY
            /BIC/ZSHPCRTID = /BIC/ZSHPCRTID.
            IF SY-SUBRC = 0.
              TMP = SY-TABIX.
            ENDIF.
            LOOP AT IT_ITAB INTO WA_ITAB FROM TMP.
              IF WA_ITAB-/BIC/ZSHPCRTID <> /BIC/ZSHPCRTID.
                EXIT.
              ELSE.
                <RESULT_FIELDS>-BBP_SCQTY = WA_ITAB-BBP_SCQTY.       
              ENDIF.
            ENDLOOP.
          ENDIF
        ENDLOOP.
    in this case my output/target DSO is:
    key1  key2    key3  qty
    1000   10       200   30
    1000   10       300   30
    1000    20      400   30
    Below is the lookup DSO data:
    key1   key2  key3   qty
    1000   10      1        10
    1000   10      2        20
    1000    20     3        30
    It is taking last record's qty value and putting it for all records.
    Please suggest something for this issue.

  • How to find SSID and Network Key to setup wireless printer to iMac?

    It is easy to find your "SSID" and "Network Key" once you understand what you are looking for. Here is what worked for me when I setup a new wirless printer today:
    1) SSID = Your Network Name
    Ex. Jason's Wi-Fi Network
    Ex. Harry's Lounge
    First way to find: on an iMac, go to the top bar on the right side and click on the "wireless symbol". You will see a list of all the wireless networks your computer is picking up. The one you are connected to (if you are able to surf the Internet) is the name you enter when asked for the SSID.
    NOVICE HINT: This is the equivalent to walking into a Starbucks and logging onto their wi-fi via their "network name," which has the word Starbucks in it. Some network names will have have locks next to them, meaning they are "secured by a password" and some will not, meaning anyone can access this "free" wi-fi. This doesn't matter either way, it just helps with making sure you have located the list. Of course, it is also possible, if you live in a remote area, that only your network name will show up.
    Second way to find: on an iMac, go to the apple symbol in the upper left corner of computer and make sure it says "finder" (if it doesn't, just click on your desktop and it will show up), then select:
    go > applications > utilities > Airport Utility > double-click on the image of the AirPort Extreme and the network name will be listed
    2) Network Key = Password used to access your Wi-Fi Network
    Ex. BMXGuy456!
    Ex. Millionare$!!!
    This is the password you created when you setup your wireless network, meaning it may not (and should not be for better security purposes) the same password as you use for your Apple ID, email etc.
    NOVICE HINT: So if for example a friend came to stay with you and wanted to connect to your "secured wifi" meaning there is a lock next to it, you would give them this password.
    EXTRA INFO:
    Why do I need this info anyway?
    Because just like anyone who wants to use your wifi when they come over, the printer needs to understand what to connect to, therefore it basically needs the network name to know "WHAT" to connect to, and the "PASSWORD" in order to access that network.

    After much stumbling around, I also discovered this answer. I picked up the 2270DW used, without disc or manual, so downloaded what I needed from the Brother site, but the Brother Mac OSX instructions feel as if they're written by a non-Mac user. I am on OSX 10.7.5, using an Airport wireless unit in Bridging mode (because I have to use a provider's router at the front end of my setup). But once I picked my Airport network name through the Brother Wireless Setup Utility and then typed my network name in the SSID box and my network password in the Network Key box ("es" --- I think the "network key - i.e. password" had to be confirmed a second time) after waiting for the utility to process the information, it worked like a charm.

  • I want to see both the ssid in same time

    help in aironet 1200
    i hope to help me,
    i have created two ssid with two vlan's but the broadcast is for one ssid only, i want the broadcasting for all my ssid in same time. where that the one ssid be appeared and other one be a hiden.
    so how can i do that?
    I want to see both the ssid in same time
    EXD-AP#
    EXD-AP#sh run
    Building configuration...
    Current configuration : 4617 bytes
    version 12.3
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname EXD-AP
    ip subnet-zero
    ip domain name Schoch-home.com
    ip name-server 172.16.0.3
    aaa new-model
    aaa group server radius rad_eap
    aaa group server radius rad_mac
    aaa group server radius rad_acct
    aaa group server radius rad_admin
    aaa group server tacacs+ tac_admin
    aaa group server radius rad_pmip
    aaa group server radius dummy
    aaa authentication login default local
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authorization exec default local
    aaa accounting network acct_methods start-stop group rad_acct
    aaa session-id common
    dot11 vlan-name test vlan 1
    dot11 ssid EXDINT
       vlan 30
       authentication open
       authentication key-management wpa
       guest-mode
       infrastructure-ssid
       wpa-psk ascii 7 14120A0F410D243F04796166
    dot11 ssid GUEST
       vlan 20
       authentication open
       authentication key-management wpa
       wpa-psk ascii 7 13000F1646050A3E0B777A62
    username 78e400ed9588 password 7 06515724181E591C014E475354
    username 78e400ed9588 autocommand exit
    username 001e65ee5c38 password 7 135547430E5A512F2E712B606D
    username 001e65ee5c38 autocommand exit
    username 002668ec5b49 password 7 144742595A52722E277D31617B
    username 002668ec5b49 autocommand exit
    username 0022fc5b437b password 7 15425B5E562C28712A67667511
    username 0022fc5b437b autocommand exit
    username 00234d9fa256 password 7 075F711E1D5D1D5C1113595952
    username 00234d9fa256 autocommand exit
    username iqbal privilege 15 password 7 00010B02240A5955
    username c417fea872a3 password 7 04585F575827494F514E571641
    username c417fea872a3 autocommand exit
    username 0016cf264d57 password 7 040B5B5759224A1C5F4D014245
    username 0016cf264d57 autocommand exit
    username exd-hq privilege 15 password 7 00010B02240A5955
    username 00268202706b password 7 15425B5E527279747A64657411
    username 00268202706b autocommand exit
    username 002314054ea0 password 7 091C1E5B4A5443425E58012B7B
    username 002314054ea0 autocommand exit
    username 002436e8f6ca password 7 1249554546585A01722D722B32
    username 002436e8f6ca autocommand exit
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption mode ciphers tkip
    encryption vlan 30 mode ciphers tkip
    encryption vlan 20 mode ciphers tkip
    ssid EXDINT
    ssid GUEST
    speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
    station-role root
    interface Dot11Radio0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio0.30
    encapsulation dot1Q 30 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    encryption mode ciphers tkip
    speed basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
    station-role root
    interface Dot11Radio1.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio1.30
    encapsulation dot1Q 30 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface FastEthernet0
    ip address 192.168.30.10 255.255.255.0
    no ip route-cache
    duplex auto
    speed auto
    hold-queue 160 in
    interface FastEthernet0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    no bridge-group 20 source-learning
    bridge-group 20 spanning-disabled
    interface FastEthernet0.30
    encapsulation dot1Q 30 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface BVI1
    ip address 192.168.30.10 255.255.255.0
    no ip route-cache
    ip default-gateway 192.168.30.1
    ip http server
    ip http authentication aaa
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip radius source-interface BVI1
    radius-server attribute 32 include-in-access-req format %h
    radius-server vsa send accounting
    control-plane
    bridge 1 route ip
    line con 0
    line vty 0 4
    end
    EXD-AP#
    EXD-AP#
    EXD-AP#

    I think that my AP not support the MBSSID doue to it's very old , can  update it ? if i can that how i do that?
    System Software Version: Cisco IOS Software
    Product/Model Number:
    AIR-AP1210
    Top Assembly Serial Number:
    FHK0712J02R
    System Software Filename:
    c1200-k9w7-tar.123-8.JEA3
    System Software Version:
    12.3(8)JEA3
    Bootloader Version:
    12.2(8)JA
    System Uptime:
    3 days, 32 minutes

  • Using multiple SSID with AP 1100 (standalone mode).

    Hi, need to configure 2 SSID on the same 1100 AP: open authentication and WPA2. It's possible to configure these 2 SSID without configuring VLAN's ?
    On CCO I've read the following:
    http://www.cisco.com/en/US/products/hw/wireless/ps430/products_qanda_item09186a008009483e.shtml
    Q. How many service set identifiers (SSIDs) can you have per VLAN?
    A. You can have only one SSID per VLAN. The use of multiple SSIDs over a single VLAN is not supported with Aironet APs.
    It's also true with the latest IOS release ?

    Hi Roberto,
    Hopefully the attached docs will answer your question:
    Cisco Aironet 1100 Series
    Using VLANs with Cisco Aironet Wireless Equipment
    Deprecated versions of Cisco Aironet software permit binding multiple SSIDs to one VLAN. Current versions do not.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801d0815.shtml#
    Cisco IOS Software Configuration Guide for Cisco Aironet Access Points, 12.2(15)JA
    Configuring Multiple SSIDs
    vlan vlan-id
    (Optional) Assign the SSID to a VLAN on your network. Client devices that associate using the SSID are grouped into this VLAN. You can assign only one SSID to a VLAN.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a00802085c4.html
    Hope this helps!
    Rob
    Please remember to rate helpful posts.......

  • 1242AG Wireless Access Point - Cannot Get DHCP IP for BVI1 interface - Multiple SSIDs...

    Hello,
    I am attempting to set up three Cisco 1242AG Wireless Access Points with multiple SSID's. I used the web interface and directions online to set up the two networks I want and at least one of the networks work wirelessly.
    However, I have two problems:
    The first, which is the most important, is that the "management" interface, BVI1, doesn't get an ip address from our DHCP server. I set the VLAN 60 (which you'll see in the documenation below) to be the native VLAN on the device as well as on the switch that the device is connected to as well as other settings in the configeration file below. Because of this, I can only manage the device via the console port which would be a huge pain once all of the devices are mounted.
    The second problem is that I am not sure how to get both wireless networks broadcasting their SSID's. I have to manually type in the SSID for the second wireless network I have which I would prefer I don't have to. Anyway I can enable broadcasting on all of the SSID's?
    Thank you for your time.
    Regards,
    Christopher Koeber
    Using 7916 out of 32768 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname AP-18.wesleysem.edu
    enable secret {Number Here} {Encrypted Password Here}
    enable password {Number Here} {Encrypted Password Here}
    aaa new-model
    aaa session-id common
    dot11 syslog
    dot11 vlan-name Kresge vlan 20
    dot11 vlan-name Library vlan 30
    dot11 vlan-name Public vlan 60
    dot11 vlan-name Secure_Public vlan 70
    dot11 vlan-name Secure_Seminary vlan 80
    dot11 vlan-name Server_Room vlan 1
    dot11 vlan-name Straughn vlan 40
    dot11 vlan-name Trott vlan 10
    dot11 vlan-name Web_Room vlan 50
    dot11 ssid (Secure) Wesley Campus
    vlan 80
    authentication open
    authentication key-management wpa version 2
    wpa-psk ascii {Number Here} {WPA Key Here}
    dot11 ssid Public
    vlan 60
    authentication open
    mobility network-id 60
    username Cisco password {Number Here} {Encrypted Password Here}
    username admin privilege 15 secret {Number Here} {Encrypted Password Here}!
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 80 mode ciphers aes-ccm
    ssid (Secure) Campus
    ssid Public
    mbssid
    station-role root
    interface Dot11Radio0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    encryption vlan 80 mode ciphers aes-ccm
    dfs band 3 block
    channel dfs
    station-role root
    interface Dot11Radio1.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio1.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio1.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio1.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio1.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio1.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio1.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio1.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface FastEthernet0
    ip dhcp client update dns
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    interface FastEthernet0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    no bridge-group 254 source-learning
    bridge-group 254 spanning-disabled
    interface FastEthernet0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    no bridge-group 10 source-learning
    bridge-group 10 spanning-disabled
    interface FastEthernet0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    no bridge-group 20 source-learning
    bridge-group 20 spanning-disabled
    interface FastEthernet0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    no bridge-group 30 source-learning
    bridge-group 30 spanning-disabled
    interface FastEthernet0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    no bridge-group 40 source-learning
    bridge-group 40 spanning-disabled
    interface FastEthernet0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    no bridge-group 50 source-learning
    bridge-group 50 spanning-disabled
    interface FastEthernet0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface FastEthernet0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    no bridge-group 70 source-learning
    bridge-group 70 spanning-disabled
    interface FastEthernet0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    no bridge-group 80 source-learning
    bridge-group 80 spanning-disabled
    interface BVI1
    ip address dhcp client-id FastEthernet0
    no ip route-cache
    ip http server
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    bridge 1 route ip
    line con 0
    line vty 0 4
    end

    I am using a third party DHCP server which is our Windows Domain Controller. I have the ip helper-address set for the native vlan of the Access Point through a layer 3 distribution switch (a Catalyst 4506) that the current switch connects to.
    I didn't see any event on the logs for the AP.
    Let me know if I need to do something else.
    Thanks.

  • Multiple SSIDS and disappearing

    We have Cisco 3602i access points for the most part, all of which advertise multiple SSIDs.
    Very occasionally we see an SSID completely disappear from view, even though others remain solid (I can't say it's all devices as the majority of people who raise the issue have apple devices, but there are the odd one or two who use Windows laptops).
    Also, the RSSI seems to fluctuate wildly.
    I should add that we have disabled up to 11mbps data rates on the controller and we're running 7.6.100.0 currently, but plan to upgrade to 7.6.110.0 tonight.
    I guess my question is how can an SSID just drop off the client view if others on the same AP are fine? 
    How does the AP deal with multiple SSIDs and does it prioritise?
    I have to add that I've never had this issue and I'm just using a company standard HP laptop with an Intel chipset.

    Hello,
    See my comments:
    Also, the RSSI seems to fluctuate wildly.
    A: This is often how a device hears the frames. Sometimes in high interference you can epxect this to jump around. I normally like to see if all the devices are doing this or just a select few. Sometimes poor clients jump around more than others. 
    I should add that we have disabled up to 11mbps data rates on the controller and we're running 7.6.100.0 currently, but plan to upgrade to 7.6.110.0 tonight.
    A: I dont think turning off lower rates are bad unless your WiFi cant support the design. Good call get on the latest. 
    I guess my question is how can an SSID just drop off the client view if others on the same AP are fine? 
    A: Again, its a client missing frames like beacons. 
    How does the AP deal with multiple SSIDs and does it prioritise?
    A: This SSIDs are virtualized. I blogged how this is done:
    http://www.my80211.com/home/2011/5/2/wlc-how-cisco-virtualizes-the-base-radio-mac-address-on-the.html
    I have to add that I've never had this issue and I'm just using a company standard HP laptop with an Intel chipset.
    A: Again I think if you search you might see this is more around specific devices. I would do a packet capture and see what is going on. Recently had to troubleshoot an Android only to find out it was just bad wifi client. Always sending NULL frames and scanning and not passing traffic 

  • Multiple SSID network; 1 Extreme (current gen) + 3 Express (2011 models)

    Hi, I'm looking to set up an Wireless network using Multiple SSID's (Business and Guest) using one airport extreme and three Airport Expresses.
    Are the Airport Expresses capable of bridging multiple ssids or extending multiple ssids?
    What's the best practice on setting this up?
    Regards,
    Mike

    By default, the AirPort Extreme will provide a simultaneous dual band signal for the "main" network, with both the 2.4 GHz and 5 GHz bands using the same wireless network name. You could think of this as your Business network.
    Wireless devices will connect to the 2.4 GHz or 5 GHz band based on their capabilities and distance from the AirPort Extreme.
    For example, most iPhones can only connnect to 2.4 GHz, so that is where they will connect. A newer laptop will be able to connect to either 2.4 GHz or 5 GHz.
    5 GHz signals are faster, but much weaker than 2.4 GHz signals, so the 5 GHz signals tend to be pretty much a line-of-sight or close proximity type of connection. In other words, if a laptop is in cloxe proximity to the AirPort Extreme, it will likely connect to the 5 GHz band. If the laptop moves a few rooms away, it will likey connect to the 2.4 GHz band.
    The AirPort Extreme does have an option to enable a Guest Network......IF.....you plan to connect the AirPort Extreme to a simple modem....not a modem/router or gateway type of device.
    If you are not sure what you have, post back with the make and model number of your "modem". If you do not have the right type of modem, you will not be able to configure a Guest Network.
    Important.....the Guest Network cannot be extended. The signal will only be produced by the AirPort Extreme.
    I assume that you want to use the Express devices to "extend" the signal using wireless only.
    Since the AirPort Express models that you have are not simultaneous dual band devices, they will be able to extend one band of the AirPort Extreme's wireless signal. In most cases, the Express will extend the 2.4 GHz band, since it is the stronger signal.
    Each AirPort Express connects to the AirPort Extreme's signal, so each AirPort Express will need to be located where it can receive a strong wireless signal from the AirPort Extreme.
    It would be better if you could connect each AirPort Express to the AirPort Extreme using a wired Ethernet connection. This would allow you to locate each AirPort Express exactly where it will be needed.

  • Configuring Multiple SSIDs

    Hello,
    I like to run multiple SSIDs on the same terminal. As the dynamic assignment of VLANs does not work with MBSSID, I try to configure how SSIDL IE. I followed the doc Cisco (Chapter 7) Next, alas my config does not work (in fact, among the clients tested, only one client receives the correct SSID). I upgraded the terminal IOS 12.4 (21a)-JA1 without success. Thank you for your help.
    you can find in the attach the configuration.
    Could you please help me ?
    Best regards

    You have alot of vlans and ssid's.. might cause you issue with older clients or handheld devices.  You check your radius logs to see what the failure are.  Make sure you set the radius attributes correct:
    The RADIUS user attributes used for the VLAN ID assignment are:
    IETF 64 (Tunnel Type)—Set this to VLAN.
    IETF 65 (Tunnel Medium Type)—Set this to 802
    IETF 81 (Tunnel Private Group ID)—Set this to VLAN ID.
    Scott

Maybe you are looking for