One multiple SSID VLAN. Is this possible?

Hello

Is it possible to have one SSID of the wireless network but when users associated with the Wlan have access to different VLAN?

It will run with a WLC (Wireless Lan Controller) and a Cisco secure ACS.

Yes, by using assignment vlan dynamic with Radius, see link for detailed configuration:

http://www.Cisco.com/en/us/Tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

Tags: Cisco Wireless

Similar Questions

  • Multiple SSIDs\VLANs, DHCP and wireless

    Hello

    Check out my last post in a different discussion.  I reported it as answered, my first question has been answered, but I am still confused of DHCP is working.  I work with a config along the lines of:

    I work with a WLC 5508.

    He'll be there 2 separate WLAN on their own VIRTUAL local area network.

    The WLC connects to the Southwest over a trunk link, which seems logical.

    However, my question is in connection with the TOUR to the switch... should be a trunk as well? (one answer, needs to be an access port)

    So my next question is:

    How clients in their ssid / VLAN respective will receive an IP via DHCP to it to the switch port that connects the TOWER on a VLAN?

    Here are the basics of my config.

    Hatch 192.168.1.55 Mgmt iface and 56

    VLAN 9 is going to be for tours only (network 192.168.9.0/24)

    VLAN 6 is for example personal WLAN SSID is CORP-WLAN (network 192.168.6.0/24)

    8 VLAN for the guests, example SSID is GUEST-WLAN (network 192.168.8.0/24)

    I have DHCP pools configured for each network, and 43 is set for the APs over the nearest SW to the WLC (the SW there rising directly)

    I have a dynamic port configured on the WLC, and two wireless LANs are associated with the port and have received their VLAN respective.

    Allows to say that I am an AP, I have tension, and given that my SW port is VLAN 9, my broadcasts DHCP is heard by the SW, and he assigned me an IP of the 192.168.9.0 pool.  It's all great.  Now, I have a client that tries to associate to my Guest-WLAN SSID, and is now applying an IP address... How can I assign an IP address from the correct pool?

    Maybe I'm too complicate it a bit...?

    In addition, lets say I have 3 pools DHCP configured network 192.168.6.0 24, 8.0, 9.0 on my way... How will the switch knows what pool to match with and VLAN individual?  I should know this, but I feel forgetful... SW needs to have an interface vlan is configured with an IP address that falls within a configured pool?

    Give me a sense, that is a good question?

    Bill

    There are several ways to solve your problem, it depends on your expectations. I guess that you will travel with the value default Local AP Mode.

    By default, it is important to note that customer traffic to a point of integrated access to the WLC, and then it comes out of the WLC on the VIRTUAL LAN that you specified. This is why the AP can be a switchport Mode access and could reside in a vlan / entirely different subnet of your wireless users.

    So assuming that it is the model that you want to track, a high level overview of the configuration would be as follows:

    Suppose you want client WLAN 1 VLAN 11 and WLAN 2 VLAN 12.  Assuming that the WLC management interface is VLAN 1.

    You simply need to create a dynamic Interface in vlan 11 and vlan 12 with the appropriate addresses. Then you would set up WLAN 1 out Interface VLAN 11 and 2 WLAN as output interface 12 VLANS.

    Now when a customer joins 1 WLAN, its traffic will be the tunnel from AP to the WLC via CAPWAP and going to the controller on VLAN 11. The client will now effectively be in VLAN 11.

    Who is?

  • App single license on multiple computers. Is this possible?

    I have a single app license but I have a desktop at work and a laptop at home. Sometimes, I would like to connect to my computer at home and access Illustrator. What I have to buy another application or my license allows me to have the program downloaded on more than one computer but simply open on one computer at a time?

    In your case, the answer is: Yes.

  • About WLC "one-to-many" designates a LAN VIRTUAL mapped to multiple SSID possible?

    The Cisco Wireless LAN Controller Architecture includes this feature (possibility of configuration)?

    You can map multiple SSID to a VLAN, but you cannot map several VLANS on a SSID.

  • I would like to see all the emails of my 3 email addresses different all in one component - as in Outlook. Is this possible?

    I get emails from multiple email addresses and would like to see them all in one place instead of having to click 5 different folders to see what's new in each of them. Is this possible? Any help is appreciated!

    Question in 2014

    How can I read my incoming e-mails in a single folder? As I do in Live mail and Outlook express.
    https://support.Mozilla.org/en-us/questions/1009047

    Looks like you need.

    TB - 38, 3 Win10-PC

  • Hey, I want to stop my subscription Creative Cloud - Photoshop (one - year paid in advance). Is this possible?

    Hey, I want to stop my subscription Creative Cloud - Photoshop (one - year paid in advance). Is this possible? And how?

    If it's subscription month. You can cancel this subscription form your adobe account:

    Cancel your membership creative cloud

    Otherwise please contact support:

    Contact the customer service

    Hope this will help you.

    Concerning

    Megha Rawat

  • HI, I'm wanting the form tool allows you to create multiple copies of documents with customized in each information fields. From excel data. Is this possible?  Thank you, Charlotte

    Hello

    I am keen on the form tool allows you to create multiple copies of documents with customized in each information fields. From excel data. Is this possible?

    Thank you

    Charlotte

    This is called a fusion and mailing. There is a possibility of Embedment in some versions of Excel (via the Acrobat PDFMaker plugin), or it can be done using a script.

  • How can I take two simultaneous images of one of the NI PCIe-1430 Board? Is this possible?

    I have two cameras (JAI - HP - M4 + CL) and I would like to take images captured at the same time two of them by a Council NI PCIe-1430, using an external trigger. Is this possible? Is there another type of solution for my problem? What I need is just two images synchronized acquisition!

    concerning

    Yes, the 1430 has two completely independent engines of acquisition which can acquire separately or simultaneously. You want to probably use some kind of trigger to trigger both cameras at the same time because the cameras themselves would not be undergoing otherwise. You can use the jury IMAQ itself to generate a trigger if you want.

    Eric

  • BVI Interface inaccessible since the addition of multiple SSID

    Announcement to the community for the first time.

    I have a simple HomeLAN which consists of a Cisco router for series 800-> switch PoE Cisco3560-> Cisco Aironet 1131AG Access Point.

    Everything works well for a while in which I had a simple port to "change the access mode" configured on the switch facing the AP and one SSID on the access point that is configured in stand-alone mode (without controller).

    My provider has enabled IPv6 on my broadband connection and I started to reconfigure my installation this afternoon to allow this.

    I decided to run only a bunk Dual LAN and a separate native IPv6 only test LAN for proof of concept.

    With this in mind, I changed the switch port to the access point to a "mode trunk switch' using simple dot1q encapsulation. I have also consulted the post helps very https://rscciew.wordpress.com/2014/05/24/multiple-ssid-configurations-on... after finding in this community post on the topic of multiple SSID https://supportforums.cisco.com/discussion/10899511/how-broadcast-2-ssid...

    I have now two SSID broadcasting (we will call double stack and ipv6 only for the sake of the argument). The SSID double stack uses VLAN 2 and 1 bridge, while the SSID only ipv6 uses 6 VLAN and bridge 6.

    I must stress at this point that my router (where I want to layer 3 for the two LANs gateways) I have DHCP, DHCPv6 and SLAAC configured on relevant VLANs.

    I seem to be the 2 VLAN trunking of properly and I can see the SSID broadcast in my house. I can connect to the SSID (authenticate and form an association as seen in 'show the dot11 association'), but I don't get an IPv4 address or IPv6 assigned to all clients (I tried Mac OS x, iOS, Android, and Windows phone). Furthermore, I can't ping the IP bvi1 of the AP - that is the element that is annoying me more that I must console to the AP to make any changes at all.

    Here is an overview of my AP configuration, with relevant parts removed for safety...

    dot11 syslog
    !
    dot11 said ipv6 only
    VLAN 6
    open authentication
    shared authentication
    authentication wpa key management
    MBSSID-guest mode
    WPA - psk ascii 7
    !
    dot11 said double stack
    VLAN 2
    open authentication
    shared authentication
    authentication wpa key management
    MBSSID-guest mode
    WPA - psk ascii 7

    interface Dot11Radio0
    no ip address
    no ip route cache
    !
    the cipher mode vlan 6 encryption tkip aes - ccm
    !
    the ciphers of vlan 2 encryption tkip aes - ccm mode
    !
    has declared ipv6 only
    !
    such double stack
    !
    MBSSID
    root of station-role
    Bridge-Group 1
    Bridge-group subscriber-loop-control 1
    Bridge-Group 1 block-unknown-source
    No source of bridge-Group 1-learning
    unicast bridge-Group 1-floods
    Bridge-Group 1 covering-disabled people
    !
    interface Dot11Radio0.2
    encapsulation dot1Q 2
    no ip route cache
    Bridge-Group 2
    the bridge-group subscriber-loop-control 2
    Bridge-Group 2 block-unknown-source
    No source of bridge-Group 2-learning
    No extinction unicast by bridge-Group 2
    Bridge-Group 2 covering-disabled people
    !
    interface Dot11Radio0.6
    encapsulation dot1Q 6
    no ip route cache
    Bridge-Group 6
    the bridge-group subscriber-loop-control 6
    Bridge-Group 6 block-unknown-source
    No source of bridge-Group 6-learning
    No bridge Group 6 unicast-flooding
    Bridge-Group 6 covering-disabled people
    !

    interface FastEthernet0
    no ip address
    no ip route cache
    automatic duplex
    automatic speed
    Bridge-Group 1
    No source of bridge-Group 1-learning
    Bridge-Group 1 covering-disabled people
    !
    interface FastEthernet0.2
    encapsulation dot1Q 2
    no ip route cache
    Bridge-Group 2
    No source of bridge-Group 2-learning
    Bridge-Group 2 covering-disabled people
    !
    interface FastEthernet0.6
    encapsulation dot1Q 6
    no ip route cache
    Bridge-Group 6
    No source of bridge-Group 6-learning
    Bridge-Group 6 covering-disabled people

    Bridge IRB

    1 channel ip bridge

    interface control2
    MGMT AP Interface Description
    address 192.168.1.6 IP 255.255.255.0
    no ip route cache

    IP default-gateway 192.168.1.50

    As you can see I can not ping the gateway of AP - I would be very grateful if someone could point me in the right direction with regard to what I'm doing wrong here?

    Thank you

    Mick

    OK means your AP is to have IP vlan2:

    Do it like this and try again:

    !

    interface Dot11Radio0.2
    encapsulation dot1Q 2
    encapsulation dot1Q 2 native
    Group 1 bridge
    Bridge-Group 2
    !
    interface FastEthernet0.2
    encapsulation dot1Q 2
    Group 1 bridge
    encapsulation dot1Q 2 native
    Bridge-Group 2

    !

    Or alternatively, you can delete the name native dot11radio0 and fa0.2. (It should also work without it), but be sure that for vlan 2 you have bridge Group 1.

    Concerning

    Remember messages useful rates

  • Closure of a SELECTION of tabs at once. Is this possible?

    Hi, I'm an average user of tabs. Let's say I opened 25 tabs in a window/session. I want to select 5 tabs to close, at one time, but without using the tabs groups/panorama that I am too clumsy use this feature.  :-) I mean it takes more time to create your groups and then close the group. I would prefer to select my tabs and close them then directly from my window screen. Is this possible?

    See:

  • I want to set up a document or a folder so that I could store all of my passwords. I need these documents to be vaulted. I have this possible on s word pad

    I have many passwords for multiple files on my internet.  I would like to implement a document or other thing so that I could store all these passwords in one place so that they are available when needed.  Needless to say that this document must be arched so that I can have access.  Is this possible with my programs.

    You can put them in a protected by password for Microsoft Excel worksheet or a Microsoft Word document, or a Bing or Google search a utility to store your passwords.  Windows doesn't have this capability built into the operating system.

  • Unique SSID from the multiple SSID

    Hello

    We seek to deploy wireless at five sites great campuses, one in each State.

    Does anyone have any ideas on the deployment unique verus multiple SSID SSID for each location.

    Are the benefits of filing a return and security to identify red devices associated with

    a unique SSID.

    The question was raised that it would be easier to configure one SSID to scan wireless

    devices that have separate SSID different places.

    Would appreciate any experience on this design

    Mate,

    Remember, when you're dealing with WLC, you do not configure the APs.  You configure the WLC and configs will be propatated of all APs manages the WLC.

    The WLC, you can use up to 18 SSID but you can configure 1 024.

    Currently, I have three SSIDS and one of them is for VoWLAN.

    Moreover, some hand scanners do not like the (hidden) SSID broadcasting.

  • restrict the SSID / VLAN to some AP?

    Is it possible to limit the SSID / VLAN to some access points of a 4400 controller?

    If I put in place the new SSID, they are distributed from all the default ap, however I onluy want the SSID is for use in areas that correspond to the type of user.

    How do you do that?

    NM

    You can do this by using the function AP-Group.

    http://www.Cisco.com/en/us/docs/wireless/controller/7.0/Configuration/Guide/c70wlan.html#wp1128591

  • Multiple SSID on AIR-SAP702I-E-K9 (700 Aironet Access Point)?

    Hello community

    I wonder if it is possible to simultaneously run multiple SSID (actually 3) on a single Cisco AIR-SAP702I-E-K9, which is a standalone AccessPoint (AP). Each SSID should be linked to a different VIRTUAL LAN. Or do I need another model or even an AccessPoint driven by the controller to run multiple SSID on different VLANS to the same AP?

    Thanks in advance.

    Kind regards
    Adrian

    Hi Adrien,.

    Yes, you can have multiple ssid on the AP standalone. Each SSID must be mapped to a VLAN different.

    Kind regards

    Shubham

    Please do not forget to note positions that answered your question and mark as answer or was useful

  • Interactive Q & A - is this possible with the Muse?

    I'm doing a page that allows for a question and an answer adapted. To make it simple...

    Question: What color is the sky?

    Answer: Blue

    You are right! Great job!

    It is more than one type 'are grasp you this concept?' feeling before going any further on the page.

    I would like to either have questions multiple choice with radio buttons or a fill in the blank form style that will provide instant feedback based on the answer given.

    At this point, I meant it as a Question to 'think' of the answer... and a click_hover_box - if you answered X, then you are right!

    It allows a lot of hand fed responses, (Cheating-if you want to), I have rather the reader would put more effort in a real answer.

    I see a lot of kind of education programs that allow this but try to incorporate simple Muse, or with Widgets, without additional buy programs.  Anyone know if this is possible or can someone point me in a direction?

    The HTML contains no pretty logic beyond rendering web pages. Everything else should be added using extensive scripting or by using the dynamic backends. So no, you can't do this kind of thing with vanilla Muse or for that matter vanilla HTML.

    MYlenium

Maybe you are looking for

  • Yahoo toolbar no longer works

    All of a sudden my yahoo toolbar doesn't show that my email address how can I resolve to show the rest of my shortcuts?

  • Why can I not spend memory (1805-s253)?

    Hello I am the owner of a Satellite 1805-s253 and I tried to upgrade its memory for 2 months without success. The laptop does not work or just sounds twice. I tried RAM from several suppliers who claim it is compatible, but it has never been the case

  • Qosmio F10 - where can I find the correct BIOS update?

    My Qosmio F10 has a mother of replacement of Toshiba with a Geforce Go 6600 GA and an Intel 915 chipset. If I understand well Toshiba manual support that this should now be designated F10 - R. I tried to update the BIOS to the latest version (2007) F

  • myRIO remote façade

    Hi all I had initially followed this link to create the remote façade so that I could remotely control the VI. It had worked fine then and when I try the same thing today on the development of PC, it gives "access error - 404' and displays the docume

  • Tried too small DPI graduation not good VGA safe mode, I tried last good config. not good!

    changed the Scalin DPI within the custom to 20% thinking it was the lowest that I need.  Also, I clicked OK rather expect expire it and go back to a screen, I could see.  I tried to go without failure under VGA mode and also tried to restart using th