Multiple SSID with Cisco AP 350, AP 1200 2

[sixteamparlay]

Is it possible to have both an SSID that is open/unencrypted and another SSID that is WPA-PSK/TKIP on the same ap 350 and ap 1200?

Has anyone done this to have a completely open guest wireless infrastructure on top of their WPA-PSK/TKIP enterprise infrastructure?

Thank you

 

[rn4it]

It is possible, I have had multiple SSID on a 1200, one was EAPS/TLS, 1 was WPA/TKIP I forget the 3rd it was a while ago. The odd thing I noticed, was even through my laptop was configured for SSIDA, once I connected to if it would show I was connected to a different SSID say SSID A. However my DHCP IP assignment would be correct. Since things seemed to be correct on the Cisco side, I wondered if it was a MS Window/Cisco incompatibliltiy. In short, If you have your guest SSID configured correctly on both the AP and client side you shouldn't have any issues.

good luck

 

[ADB100]

If you have 802.11b Radios in the AP's then you can only broadcast one SSID as the radios only have a single MAC address. With the 802.11G radios you have eight MAC addresses so can advertise up to eight SSID's.

HTH

Andy

 

[Gihzmo]

I am working on something very similar, with AP1200s, and the problem that I am having is that it only lets me configure the encryption on the radio level, not the SSID level, so I configure TKIP+WEP 128 on the radio and it asks for a key when I use my public side. I have configured WPA on the internal side and that seems to work fine, is there any way to configure it so I can have WPA-TKIP on one side and have it completely open and unencrypted on the other. If you can provide some documentation or some config examples, that would be wonderful.

I have already looked through the AP1200 Config guide.

 

[sixteamparlay]

There is a way to do it by SSID if you create VLAN's on each access point and on your switches. It wasn't worth the time so we didn't go forward with it.

 

[Gihzmo]

Is that the only way to do it? Because I need to have both SSIDs going to the same VLAN, as we have a BlueSocket appliance handling authentication, I just wanted to give the option of authentication or no authentication for our staff and public access.

 

[sixteamparlay]

That's the only way I've seen it to be possible. I guess you could configure some transparency across the different VLAN's but I didn't even want to get into it as it didn't seem worth the trouble. We setup a linksys wireless router in the guest area instead with the open "guest" access.

$50 solution.