Autonomous Access Point Configuration

Configuring Radio Interface

interface Dot11Radio0

ssid SSID-NAME – Assigning SSID in interface

encryption mode ciphers aes-ccm – Set the encryption

encryption vlan 1 mode ciphers aes-ccm – Configure the encryption for vlan

Configuring Radio sub interface

interface Dot11Radio0.1 – To create sub interface

encapsulation dot1Q 1 native – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)

Configuring Radio sub interface

interface Dot11Radio1.1 – To create sub interface

encapsulation dot1Q 1 native – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)

Configuring Ethernet interface

interface GigabitEthernet0.1 – To create sub interface

encapsulation dot1Q 1 native  – To configure native vlan for sub interface (if you don’t type native then by default native command will be applied in the interface)

Configuring SSID

dot11 ssid SSID-NAME

vlan 1 – Configure the vlan, as ssid must have vlan to broadcast ssid

authentication open – Setting authentication for ssid, if needed for wpa then configure after this command.

authentication key-management wpa version 2 – Once the authentication is set then you can  configure this, encryption mode for vlan 1 must be configured in radio interface.

wpa-psk ascii 12345678 – To configure the key

guest-mode – To broadcast ssid

Key Points

Switchport configuration can be either trunk or access, if it is trunk then native vlan will be used to get the IP Addresess.

For multiple ssid you just need to replace the guest-mode with mbssid guest-mode and mbssid command must be added in radio interface (dot0/dot1)