By default, service set identifiers (SSIDs) configured on a Cisco integrated services router are not broadcast. This means that if you want to configure a client to use the wireless network, you'll have to manually enter the SSID in the client configuration. This isn't a bad thing, but it is a tad inconvenient.
A quick note: there is no security benefit to not broadcasting the SSID. Whenever a client connects to the "hidden" network, the SSID is sent in cleartext and is easily captured.
In order to broadcast the SSID, you need to add the
guest-mode command to the SSID configuration. For example:
dot11 ssid EXAMPLESSID1 vlan 9 authentication open guest-mode ! interface Dot11Radio1 no ip address ! ssid EXAMPLESSID1 ! station-role root ! interface Dot11Radio1.9 encapsulation dot1Q 9 !
If you try to add another guest-mode SSID to the radio interface, you'll get the following error:
Dot11Radio1: Guest-ssid already existing on ssid EXAMPLESSID1
So, what needs to be done?
The key to multiple broadcast SSIDs is in the
mbssid command. Simply change the
guest-mode command to
mbssid guest-mode and add
mbssid to the interface configuration.
Here's an example configuration.
dot11 ssid EXAMPLESSID1 vlan 9 authentication open mbssid guest-mode ! dot11 ssid EXAMPLESSID2 vlan 99 authentication open mbssid guest-mode ! interface Dot11Radio1 no ip address ! ssid EXAMPLESSID1 ! ssid EXAMPLESSID2 ! mbssid station-role root ! interface Dot11Radio1.9 encapsulation dot1Q 9 ! interface Dot11Radio1.99 encapsulation dot1Q 99 !
Obviously, this configuration isn't enough to get our wireless working, but it shows the basics of getting multiple SSIDs to broadcast in guest mode.
Photo by Emin Ozkan.