Specifications
8-4
Cisco Aironet 1200 Series Access Point Installation and Configuration Guide
OL-3446-01
Chapter 8 Configuring Multiple SSIDs
Configuring Multiple SSIDs
Note You use the ssid command’s authentication options to configure an authentication type for each SSID.
See Chapter 10, “Configuring Authentication Types,” for instructions on configuring authentication
types.
Use the no form of the command to disable the SSID or to disable SSID features.
This example shows how to:
• Name an SSID
• Configure the SSID for RADIUS accounting
• Set the maximum number of client devices that can associate using this SSID to 15
• Assign the SSID to a VLAN
ap1200# configure terminal
ap1200(config)# configure interface dot11radio 0
ap1200(config-if)# ssid batman
ap1200(config-ssid)# accounting accounting-method-list
ap1200(config-ssid)# max-associations 15
ap1200(config-ssid)# vlan 3762
ap1200(config-ssid)# end
Using a RADIUS Server to Restrict SSIDs
To prevent client devices from associating to the access point using an unauthorized SSID, you can
create a list of authorized SSIDs that clients must use on your RADIUS authentication server.
The SSID authorization process consists of these steps:
1. A client device associates to the access point using any SSID configured on the access point.
2. The client begins RADIUS authentication.
3. The RADIUS server returns a list of SSIDs that the client is allowed to use. The access point checks
the list for a match of the SSID used by the client. There are three possible outcomes:
a. If the SSID that the client used to associate to the access point matches an entry in the allowed
list returned by the RADIUS server, the client is allowed network access after completing all
authentication requirements.
b. If the access point does not find a match for the client in the allowed list of SSIDs, the access
point disassociates the client.
Step 8
infrastructure-ssid [optional] (Optional) Designate the SSID as the SSID that other access
points and workgroup bridges use to associate to this access
point. If you do not designate an SSID as the infrastructure
SSID, infrastructure devices can associate to the access point
using any SSID. If you designate an SSID as the infrastructure
SSID, infrastructure devices must associate to the access point
using that SSID unless you also enter the optional keyword.
Step 9
end Return to privileged EXEC mode.
Step 10
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose