Multiple ssids on 871w

I have a user behind a 871w router in their home that we want to create a separate wireless network for the kids and guests.  The user's pc whether it is connected to the 871 wired or wireless will be on vlan1 and get its ip address from the router.  Any other user will strictly be wireless on a separate vlan with a separate ip address range.  Both ssids will use encryption on join the wireless networks.  Do I need to create two separate bridge groups? Two separate dot11 interfaces? I believe so. However I am confused with nat?  Do I also have nat on the second bvi interface that is for the guest network? It's been a long time since I done this and a not clear about the procedure.

The answer is yes to all.
yes, you need to create a new dot11 subinterface, as it's only going to be wireless, you don't need hte BVI, you can put the IP address right on the dot11 subinterface.  Then teh ip nat inside statement goes there.  And you'll want to add that new subnet to the NAT ACL so that it is allowed to get to the interwebz.
So basically
Dot11radio0.1
encapsulation dot1q vlan 1 native
Dot11radio0.2
ip address 192.168.2.1 255.255.255.0
ip nat inside
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

Similar Messages

  • Multiple SSID's on the same subnet?

    Can you have Multiple SSID's on the same subnet?
    SSID1 authenticates clients via radius.
    Our corporation bought printers with wireless cards that only support WPA-PSK so we created SSID2 for the printers. We can connect to both SSID's and ping from SSID1 to SSID2 but we can not perform other functions such as view the printer management interface with a browser. Should it be possibe to communicate between SSID1 and SSID2 on the same subnet?

    Yes you should have no issue, but the only thing is that you are using a lower security method... so either you put them on different subnets so you can control the traffic via acl's or might as well use the same security method to make it easier. The fact that you can ping sounds like you should be able to http to the device.

  • Single access point with multiple ssids and single channel possible?

    Hi everybody.
    I have this silly question.
    Let say we have three vlans, vlan1,2,3  and they are mapped to wlans as follows:
    Vlan 1  ssid1
    Vlan 2 ssid2
    Vlan3 ssid 3
                      AP --------trunk------Switchted network.
    Our Ap  has mobile devices in three wlans, i.e ssid1ssid2 and ssid3
    Since AP uses half duplex mode,  mobile devices need positive ack from ap  before they can send data,  therefore once channel let say channel 3( assuming 802.11b is used) can be shared by all mobile devices in three wlans.  
    Is  my understanding correct?
    Thanks and have a great weekend.

    Hii ,
    Yes ,that is pretty much possible as suggested by other experts on board. Depending on your access point you will have 1 (2.4 GHz) or  both 2.4 & 5GHz radios.
    You can configure multiple SSIDs (up to 16 ) known as MBSSID mode in autonomous environment. In Controller based architecture you can configure up to 512 WLAN (SSID) and transmit any 16 of them per AP (using AP group feature). However , it is recommended to keep multiple SSID count below 8 as for each SSID separate beacon will be sent on air which consumes more air time.
    Hope this helps
    Thanks
    Vinay

  • Multiple SSID with different Login Web authority pages

    Our current setup is one Anchor control and then several WLC’s, I want to know if I can have multiple SSID and use different Web Auth pages form them, so I can have a SSID that requires a password to Authentication access and another SSID that requires pass through Authentication but they would have different web authentication pages and go to different pages once Authenticated.
    Is this possible to ?

    Hi,
    If  you are running WLC software 4.2 and above then u can do this on per  WLAN basis.. here is the link which tells on how to do it..
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml#A1
    Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
    Regards
    Surendra

  • Is it possible to do multiple ssids and encryptions on an autonomous AP without vlans?

    I got a customer who just has autonomous APs. They are upgrading from 1210s to 1262s. They are currently running a config that is wide open with no authentication or encryption and using a VPN tunnel on the wireless clients for security. They want to switch to using WPA2/PSK with the new APs. They have existing clients that have to continue to work during the upgrade to the new APs. They run 3 shifts so it is a 24 hr operation with no downtime. What I was thinking would be to configure the 1262 with multiple SSIDs, one with their existing settings and one with the new. Then I could swap the APs one at a time and it would only impact service for a short period of time while I was mounting the new AP. Then once all the new APs are installed I could transition the clients over to the new SSID and encryption then disable the old SSID once all the clients are switched over. I've done this before with a WLC but not with an autonomous APs. The only config examples I can find uses VLANs. This customer is not using VLANs. Is there anyway to use multiple SSIDs with different encryption on a single radio on an autonomous 1262 without VLANs?
    The site has about 30 APs and 100 clients. Yes I know a controller would be preferred for a site of this size but that is a question for sales and why they didn't see them a controller. I just get stuck with what they sell them.
    thanks

    Hi Don,
    Im afraid on the autonmous platform you can not map multiple WLANS to a single vlan.
    "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
    ‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

  • Using multiple SSID with AP 1100 (standalone mode).

    Hi, need to configure 2 SSID on the same 1100 AP: open authentication and WPA2. It's possible to configure these 2 SSID without configuring VLAN's ?
    On CCO I've read the following:
    http://www.cisco.com/en/US/products/hw/wireless/ps430/products_qanda_item09186a008009483e.shtml
    Q. How many service set identifiers (SSIDs) can you have per VLAN?
    A. You can have only one SSID per VLAN. The use of multiple SSIDs over a single VLAN is not supported with Aironet APs.
    It's also true with the latest IOS release ?

    Hi Roberto,
    Hopefully the attached docs will answer your question:
    Cisco Aironet 1100 Series
    Using VLANs with Cisco Aironet Wireless Equipment
    Deprecated versions of Cisco Aironet software permit binding multiple SSIDs to one VLAN. Current versions do not.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801d0815.shtml#
    Cisco IOS Software Configuration Guide for Cisco Aironet Access Points, 12.2(15)JA
    Configuring Multiple SSIDs
    vlan vlan-id
    (Optional) Assign the SSID to a VLAN on your network. Client devices that associate using the SSID are grouped into this VLAN. You can assign only one SSID to a VLAN.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a00802085c4.html
    Hope this helps!
    Rob
    Please remember to rate helpful posts.......

  • 1242AG Wireless Access Point - Cannot Get DHCP IP for BVI1 interface - Multiple SSIDs...

    Hello,
    I am attempting to set up three Cisco 1242AG Wireless Access Points with multiple SSID's. I used the web interface and directions online to set up the two networks I want and at least one of the networks work wirelessly.
    However, I have two problems:
    The first, which is the most important, is that the "management" interface, BVI1, doesn't get an ip address from our DHCP server. I set the VLAN 60 (which you'll see in the documenation below) to be the native VLAN on the device as well as on the switch that the device is connected to as well as other settings in the configeration file below. Because of this, I can only manage the device via the console port which would be a huge pain once all of the devices are mounted.
    The second problem is that I am not sure how to get both wireless networks broadcasting their SSID's. I have to manually type in the SSID for the second wireless network I have which I would prefer I don't have to. Anyway I can enable broadcasting on all of the SSID's?
    Thank you for your time.
    Regards,
    Christopher Koeber
    Using 7916 out of 32768 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname AP-18.wesleysem.edu
    enable secret {Number Here} {Encrypted Password Here}
    enable password {Number Here} {Encrypted Password Here}
    aaa new-model
    aaa session-id common
    dot11 syslog
    dot11 vlan-name Kresge vlan 20
    dot11 vlan-name Library vlan 30
    dot11 vlan-name Public vlan 60
    dot11 vlan-name Secure_Public vlan 70
    dot11 vlan-name Secure_Seminary vlan 80
    dot11 vlan-name Server_Room vlan 1
    dot11 vlan-name Straughn vlan 40
    dot11 vlan-name Trott vlan 10
    dot11 vlan-name Web_Room vlan 50
    dot11 ssid (Secure) Wesley Campus
    vlan 80
    authentication open
    authentication key-management wpa version 2
    wpa-psk ascii {Number Here} {WPA Key Here}
    dot11 ssid Public
    vlan 60
    authentication open
    mobility network-id 60
    username Cisco password {Number Here} {Encrypted Password Here}
    username admin privilege 15 secret {Number Here} {Encrypted Password Here}!
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 80 mode ciphers aes-ccm
    ssid (Secure) Campus
    ssid Public
    mbssid
    station-role root
    interface Dot11Radio0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    encryption vlan 80 mode ciphers aes-ccm
    dfs band 3 block
    channel dfs
    station-role root
    interface Dot11Radio1.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio1.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio1.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio1.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio1.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio1.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio1.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio1.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface FastEthernet0
    ip dhcp client update dns
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    interface FastEthernet0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    no bridge-group 254 source-learning
    bridge-group 254 spanning-disabled
    interface FastEthernet0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    no bridge-group 10 source-learning
    bridge-group 10 spanning-disabled
    interface FastEthernet0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    no bridge-group 20 source-learning
    bridge-group 20 spanning-disabled
    interface FastEthernet0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    no bridge-group 30 source-learning
    bridge-group 30 spanning-disabled
    interface FastEthernet0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    no bridge-group 40 source-learning
    bridge-group 40 spanning-disabled
    interface FastEthernet0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    no bridge-group 50 source-learning
    bridge-group 50 spanning-disabled
    interface FastEthernet0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface FastEthernet0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    no bridge-group 70 source-learning
    bridge-group 70 spanning-disabled
    interface FastEthernet0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    no bridge-group 80 source-learning
    bridge-group 80 spanning-disabled
    interface BVI1
    ip address dhcp client-id FastEthernet0
    no ip route-cache
    ip http server
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    bridge 1 route ip
    line con 0
    line vty 0 4
    end

    I am using a third party DHCP server which is our Windows Domain Controller. I have the ip helper-address set for the native vlan of the Access Point through a layer 3 distribution switch (a Catalyst 4506) that the current switch connects to.
    I didn't see any event on the logs for the AP.
    Let me know if I need to do something else.
    Thanks.

  • WAP200 and .1x/radius authentication with multiple SSIDs

    Apparently it's not possible to define more than a single radius server when using multiple SSIDs with WAP200. Unfortunately WAP200 doesn't add the name of the SSID as a radius attribute, so it's not possible to make distinction whether the user is trying to log in to SSID A or B. Does anyone have any ideas or workarounds for this limitation? Of course the best solution would be if Cisco/Linksys fixed the firmware so that the SSID of the logging in user would be sent to the radius server as an extra attribute or appended to the client mac address.

    Security option for an SSID can be unique and can be configured when you configure a SSID or under VLAN . Note that each vlan is uniquely mapped to induvidual SSID.

  • Authentication with Multiple SSIDs AP521G, using Autonomous

    I have an AP521G access point that I am trying to setup authentication for multiple SSIDs. One SSID is for domain users with WPA/TKIP authentication to a radius server and the other SSID is for guest to have access to Internet with no authentication. Is there a way to setup both SSIDs on the AP for this configuration?

    Security option for an SSID can be unique and can be configured when you configure a SSID or under VLAN . Note that each vlan is uniquely mapped to induvidual SSID.

  • Multiple SSIDS with VLAN ACL seperation

    Hi,
    I have bought a 887W and I'm new to wireless on a router, I need advice about seperating multiple SSIDs with access list.
    I have configured 2 SSIDs one for 'trusted' clients and one for 'guest' clients. I want to prevent the 'guest' SSID obtaining access to the other vlan/SSID using an ACL.
    Each SSID is associated with a BVI, the BVI has the IP address, then it's linked to a seperated VLAN interface, then each VLAN.
    Thanks if you can help...
    Dave

    Solved my issue, I simply attached the ACLs to the BVI interfaces. Fairly obvious, but I read a Cisco webpage that said this could not be done, although this may have been a temporary bug that has been fixed.

  • Multiple SSIDS and disappearing

    We have Cisco 3602i access points for the most part, all of which advertise multiple SSIDs.
    Very occasionally we see an SSID completely disappear from view, even though others remain solid (I can't say it's all devices as the majority of people who raise the issue have apple devices, but there are the odd one or two who use Windows laptops).
    Also, the RSSI seems to fluctuate wildly.
    I should add that we have disabled up to 11mbps data rates on the controller and we're running 7.6.100.0 currently, but plan to upgrade to 7.6.110.0 tonight.
    I guess my question is how can an SSID just drop off the client view if others on the same AP are fine? 
    How does the AP deal with multiple SSIDs and does it prioritise?
    I have to add that I've never had this issue and I'm just using a company standard HP laptop with an Intel chipset.

    Hello,
    See my comments:
    Also, the RSSI seems to fluctuate wildly.
    A: This is often how a device hears the frames. Sometimes in high interference you can epxect this to jump around. I normally like to see if all the devices are doing this or just a select few. Sometimes poor clients jump around more than others. 
    I should add that we have disabled up to 11mbps data rates on the controller and we're running 7.6.100.0 currently, but plan to upgrade to 7.6.110.0 tonight.
    A: I dont think turning off lower rates are bad unless your WiFi cant support the design. Good call get on the latest. 
    I guess my question is how can an SSID just drop off the client view if others on the same AP are fine? 
    A: Again, its a client missing frames like beacons. 
    How does the AP deal with multiple SSIDs and does it prioritise?
    A: This SSIDs are virtualized. I blogged how this is done:
    http://www.my80211.com/home/2011/5/2/wlc-how-cisco-virtualizes-the-base-radio-mac-address-on-the.html
    I have to add that I've never had this issue and I'm just using a company standard HP laptop with an Intel chipset.
    A: Again I think if you search you might see this is more around specific devices. I would do a packet capture and see what is going on. Recently had to troubleshoot an Android only to find out it was just bad wifi client. Always sending NULL frames and scanning and not passing traffic 

  • Multiple SSIDs/VLAN - NPS Authentication

    I have recently set up a similar network using Ruckus equipment; however, need to do it now with Cisco...
    I have a multiple SSIDs associated to different VLANs broadcasting.  I would like to configure a single Radius server pointed to my NPS server and allow for authentication by group to each SSID. 
    With Ruckus I had to put in a vendor specific custom attribute and then use Roles to allow access by AD Security Group. 
    Does anyone know how to setup something similar with Cisco?  I just need a single group to be able to autheticate to each SSID.
    Josh Price

    This is pretty straightforward.
    Just create a NPS policy for each SSID.
    A simple policy could check 3 conditions.
    Windows Groups = DOMAIN\GroupABC
    Called Station ID = .*:SSIDNAME$
    NAS Port ID = Wireless IEEE or Wireless Other
    Just change SSIDNAME to whatever the specific SSID is, and obviously the group that you want mapped.  The SSID condition uses regex. 
    Cheers
    Peter

  • Multiple SSID network; 1 Extreme (current gen) + 3 Express (2011 models)

    Hi, I'm looking to set up an Wireless network using Multiple SSID's (Business and Guest) using one airport extreme and three Airport Expresses.
    Are the Airport Expresses capable of bridging multiple ssids or extending multiple ssids?
    What's the best practice on setting this up?
    Regards,
    Mike

    By default, the AirPort Extreme will provide a simultaneous dual band signal for the "main" network, with both the 2.4 GHz and 5 GHz bands using the same wireless network name. You could think of this as your Business network.
    Wireless devices will connect to the 2.4 GHz or 5 GHz band based on their capabilities and distance from the AirPort Extreme.
    For example, most iPhones can only connnect to 2.4 GHz, so that is where they will connect. A newer laptop will be able to connect to either 2.4 GHz or 5 GHz.
    5 GHz signals are faster, but much weaker than 2.4 GHz signals, so the 5 GHz signals tend to be pretty much a line-of-sight or close proximity type of connection. In other words, if a laptop is in cloxe proximity to the AirPort Extreme, it will likely connect to the 5 GHz band. If the laptop moves a few rooms away, it will likey connect to the 2.4 GHz band.
    The AirPort Extreme does have an option to enable a Guest Network......IF.....you plan to connect the AirPort Extreme to a simple modem....not a modem/router or gateway type of device.
    If you are not sure what you have, post back with the make and model number of your "modem". If you do not have the right type of modem, you will not be able to configure a Guest Network.
    Important.....the Guest Network cannot be extended. The signal will only be produced by the AirPort Extreme.
    I assume that you want to use the Express devices to "extend" the signal using wireless only.
    Since the AirPort Express models that you have are not simultaneous dual band devices, they will be able to extend one band of the AirPort Extreme's wireless signal. In most cases, the Express will extend the 2.4 GHz band, since it is the stronger signal.
    Each AirPort Express connects to the AirPort Extreme's signal, so each AirPort Express will need to be located where it can receive a strong wireless signal from the AirPort Extreme.
    It would be better if you could connect each AirPort Express to the AirPort Extreme using a wired Ethernet connection. This would allow you to locate each AirPort Express exactly where it will be needed.

  • Configuring Multiple SSIDs

    Hello,
    I like to run multiple SSIDs on the same terminal. As the dynamic assignment of VLANs does not work with MBSSID, I try to configure how SSIDL IE. I followed the doc Cisco (Chapter 7) Next, alas my config does not work (in fact, among the clients tested, only one client receives the correct SSID). I upgraded the terminal IOS 12.4 (21a)-JA1 without success. Thank you for your help.
    you can find in the attach the configuration.
    Could you please help me ?
    Best regards

    You have alot of vlans and ssid's.. might cause you issue with older clients or handheld devices.  You check your radius logs to see what the failure are.  Make sure you set the radius attributes correct:
    The RADIUS user attributes used for the VLAN ID assignment are:
    IETF 64 (Tunnel Type)—Set this to VLAN.
    IETF 65 (Tunnel Medium Type)—Set this to 802
    IETF 81 (Tunnel Private Group ID)—Set this to VLAN ID.
    Scott

  • Wireless Network Management with Multiple SSIDs in one Wireless Profile

    Could anybody explain me about how Multiple SSIDs in one Wireless Network Name (Network Profile) ? Configuration will be pushed to Windows 7 Pro from Wins Server 2008 R2.
    Objective: Multiple office locations will have different SSIDs and when the laptop user travels one location to another, he/she could connect to wireless networks at any offices without any configuration change but utilizing "Automatically use my Windows
    logon name and password (and domain if any.)" setting in EAP MSCHAPv2 properties. 
    Network Name: Enterprise
    SSIDS: SFO-WIFI, LAX-WIFI,CHI-WIFI,NYC-WIFI,
    Network Type:Access Point
    Security Type: WPA2-Enterprise
    Encryption Type: AES
    Network Authentication Method: Microsoft:Protect EAP(PEAP)
    My question is: (1) Will Windows try all the SSIDs in order to get connected to the Wireless Network at the office? (Let's say, user is in NYC, but will Windows try to find SFO-WIFI SSID first, wait until time out, retry?, and moves on to LAS-WIFI SSID,
    wait until time out, retry?, and moves on to CHI-WIFI and finally tries NYC-WIFI SSID and found the SSID in the beacon from Access Point and authenticates through RADIUS?
    (2) If the answer is YES, what is the waiting time/timeout setting for one SSID before moves on to another?
    (3) If the answer is NO, what is the process to get user connected to NYC-WIFI SSID when he/she is in NYC office within the range of that SSID?

    Hello Ninjago_2224,
    About the multiple office location have different SSIDs, does the location A has the signal used in
    location D?
    Please go to Control Panel\Network and Internet\Network and Sharing Center
    , and then click Manage wireless networks.
    The windows will try to connect to these networks in the order listed.
    Please check if the four SSID pushed by Windows Server 2008 is listed as mentioned above.
    If the location A have the location D SSID and the location D SSID has higher priority, the Windows will connect to
    location D SSID.
    So about the question 1, the Windows will try the SSID in order.
    About the question 2, I can’t find the accurate time that test one SSID and move to another. But based on my test, it is very fast.
    For more information, please take a look at the following article.
    http://www.howtogeek.com/howto/27067/change-wireless-network-priority-to-make-windows-7-choose-the-right-network-first/
    Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Best regards,
    Fangzhou CHEN
    Fangzhou CHEN
    TechNet Community Support

Maybe you are looking for

  • Slow motion / fast motion in Premiere Elements 13

    I read that in Premiere Elements 13 fast motion (and I think also slow motion) ist removed. Is that correct. And if yes: Is there any workaround available?

  • My iMac won't see my firewire hard drive

    I'm trying to connect an external hard drive to my iMac. It just doesn't see it- I've been using it fine on 2 other macs. Always the drives just appear but there is nothing. I've tried different cables, 400/800, but it's just not there. Help would be

  • Apple Configurator Device Backup Not Working - HELP ASAP Please

    Hey Everyone! We are trying to backup one iPad so we can take that backup and add it to all of our other iPads.... In Apple Configurator I've added all of the apps, setup a profile, etc. On PREPARE, At the top I go to DEVICES and click on BACKUP. It

  • Trouble Connecting with Windows Partition

    Hi all, I'm having trouble figuring out how to connect to my windows partition on my MacBook from my Desktop. I've obviously set things up incorrectly, but I can't seem to find the proper information to do it right. On my Macbook, I have two partitio

  • [ Solved (?) ] CUPS error - service doesn't start

    I've posted this here, because it is a print server problem. I've installed cups as usual on a machine (Yes, as in the wiki). The packages installed were: cups gsfonts ghostscript and hplip (for a HP printer ). If I do /etc/rc.d/cupsd start ( or anyt