Cisco Router 860, 880 Series User Manual

Service Set Identifier (SSID)
  Multiple Basic SSIDs
9
Configuring SSIDs
OL-11499-01
 The guest-mode SSID and Delivery Traffic Indicator Message (DTIM) period configured in this 
command are applied only when MBSSIDs are enabled on the radio interface. 
When client devices receive a beacon that contains a DTIM, they wake up to check for pending 
packets. Longer intervals between DTIMs let battery-powered clients sleep longer and preserve 
power. Conversely, shorter DTIM periods reduce the delay in...

Service Set Identifier (SSID)
  Multiple Basic SSIDs
10
Configuring SSIDs
OL-11499-01
This example shows how to:
 Enable multiple BSSIDs on a radio interface
 Create an SSID called visitor
 Designate the SSID as a BSSID
 Specify that the BSSID is included in beacons
 Set a DTIM period for the BSSID
 Assign the SSID visitor to the radio interface
ap# configure terminal
ap(config)# interface d0
ap(config-if)# mbssidap(config-if)# exit
ap(config)# dot11 ssid visitor
ap(config-ssid)# mbssid guest-mode...

Service Set Identifier (SSID)
  Using a RADIUS Server for SSID Authorization
11
Configuring SSIDs
OL-11499-01
Using a RADIUS Server for SSID Authorization
To prevent unauthorized client devices from associating to the access point, you can create a list of 
authorized SSIDs on your RADIUS authentication server. 
The RADIUS SSID authorization process consists of these steps:
1.A client device associates to the access point using any SSID that is configured on the access point. 
2.The client begins RADIUS...

Service Set Identifier (SSID)
  NAC Support for MBSSID
12
Configuring SSIDs
OL-11499-01
NAC Support for MBSSID
Networks must be protected from security threats, such as viruses, worms, and spyware. These security 
threats disrupt business, causing downtime and continual patching. Endpoint visibility and control are 
needed to help ensure that all wired and wireless devices attempting to access a network meet corporate 
security policies. Infected or vulnerable endpoints need to be automatically detected,...

Service Set Identifier (SSID)
  NAC Support for MBSSID
13
Configuring SSIDs
OL-11499-01
Each SSID is assigned a normal VLAN, which is the VLAN on which healthy clients are placed. The 
SSID can also be configured to have up to three backup VLANs that correspond to the quarantine 
VLANs on which clients are placed based on their state of health. These VLANs for the SSID use the 
same BSSID as assigned by the MBSSID for the SSID.
The configured VLANs are different and no VLAN overlap within an SSID is...

Service Set Identifier (SSID)
  NAC Support for MBSSID
14
Configuring SSIDs
OL-11499-01
Configuring NAC
NoteThis feature supports only Layer 2 mobility within VLANs. Layer 3 mobility using network ID is not 
supported in this feature.
NoteBefore you attempt to enable NAC for MBSSID on your access points, you should first have NAC 
working properly. Figure 2 shows a typical network setup.
Figure 2 Typical NAC Network Setup
For additional information, see the documentation for deploying NAC for Cisco...

Service Set Identifier (SSID)
  NAC Support for MBSSID
15
Configuring SSIDs
OL-11499-01
authentication open  authentication network-eap eap_methods  
!
dot11 ssid mktgvlan mktg-normal backup mktg-infected1, mktg-infected2, mktg-infected3 
authentication open  
authentication network-eap eap_methods ! 
interface Dot11Radio0
!encryption vlan engg-normal key 1 size 40bit 7 482CC74122FD transmit-key 
encryption vlan engg-normal mode ciphers wep40  
! encryption vlan mktg-normal key 1 size 40bit 7...

Service Set Identifier (SSID)
  NAC Support for MBSSID
16
Configuring SSIDs
OL-11499-01 

CH A P T E R
 
10-1
Cisco 800 Series Integrated Services Routers Wireless Software Configuration Guide
xx-xxxxx-xx
10
Configuring Radio Settings
This chapter describes how to configure radio settings for the wireless device in the following sections:
 Enabling the Radio Interface, page 10-2
 Configuring the Role in the Radio Network, page 10-2
 Radio Tracking, page 10-4
 Configuring Radio Data Rates, page 10-4
 Configuring MCS Rates, page 10-7
 Configuring Radio Transmit Power, page 10-9
 Configuring...

 
10-2
Cisco 800 Series Integrated Services Routers Wireless Software Configuration Guide
xx-xxxxx-xx
Chapter 10      Configuring Radio Settings
Enabling the Radio Interface
Enabling the Radio Interface
The wireless device radios are disabled by default. 
NoteYou must create a service set identifier (SSID) before you can enable the radio interface. 
To enable the access point radio, follow these steps, beginning in privileged EXEC mode:
Use the shutdown command to disable the radio port. 
Configuring the...