ration
Figure 14 Enabling the Unencrypted VLAN
Figure 15 Encrypted VLAN Configuration
Figure 16 List of VLANs
Figure 17 VLAN Summary Status Table
11. Figure 18. Click on Setup > Service Sets. (This is the same screen as shown in Step 1 of this Appendix.) The SSIDs lists are configurable per radio. On a Cisco Aironet 1200 Series Access Point with two radios, 802.11b radio SSIDs are referred to as "Internal" SSIDs and 802.11a radio SSIDs are referred to as "Module" SSIDs.
Figure 18 Main Setup Page
Figure 19 Access Point Radio Internal Service SetsPrimary SSID
Figure 20 Access Point Radio Internal Primary SSID Configuration
Figure 21 Creating a Secondary SSID
Figure 22 Secondary SSID "Open_WEP" Configuration
16. Figure 23. Create an SSID for infrastructure devices: Map the native VLAN of the access point to this SSID in order to allow infrastructure devices (such as workgroup bridges and repeaters) to associate to the access point using this SSID.
Figure 23 SSID for Infrastructure Devices
17. Figure 24. Infrastructure SSID configuration: Set the index of the SSID created in Step 16 as the "Infrastructure" SSID. Disallow all infrastructure devices on non-Infrastructure SSIDs (recommended).
Figure 24 Infrastructure SSID Configuration
Figure 25 Internal Service Set Summary Status Table
6 Appendix B: VLAN Configuration Example for Cisco IOS Software Release 12.2.4-JA for Cisco Aironet 1100 Series Access Point
Figure 26 "Guest" SSID Configuration
Figure 27 Enabling 802.1Q Trunking
Figure 28 Creating the Default VLAN
3. Figure 29. Set the native VLAN-ID: Click on Services > VLAN. Set the default VLAN-ID (native VLAN-ID) of the Cisco Aironet 1100 Series Access Point. A WARNING message will be displayed, click "OK."
Figure 29 Set the Default (Native) VLAN-ID
Figure 30 Creation of VLAN-ID 12
Figure 31 List of Active VLANs
Figure 32 Create and Map SSIDs to the Active VLANs
Figure 33 Example SSID to VLAN ID Mapping
Figure 34 Setting the Guest (Primary) SSID
9. Figure 35. Create an Infrastructure SSID and map to native VLAN (if there is a requirement): This is only needed if Infrastructure devices (such as workgroup bridges and repeaters) will associate to the access point.
Figure 35 Creating an Infrastructure SSID with Mapping to Native VLAN
Figure 36 Setting the Infrastructure SSID
Figure 37 Enabling VLAN Encryption for VLAN-ID 12
12. Figure 38. Enable VLAN encryption: Click on Security > WEP Key Manager. For VLAN-ID 10 (native VLAN), WEP encryption is enabled along with per-packet key hashing (as part of Cisco TKIP). A unique encryption key is set for the native (default) VLAN.
Figure 38 Enabling Encryption for VLAN-ID 10 (Default VLAN
Table 4 Cisco Aironet 1100 Series Access Point CLI Configuration for VLANs
7 Appendix C: Procedure to Configure RADIUS-Based User Access Control on Cisco Secure Access Control Server Software
The procedure to configure RADIUS-based user access control on Cisco Secure ACS Version 2.6 or later is provided below. This procedure provides configuration information for Internet Engineering Task Force (IETF), Cisco IOS Software and Cisco PIX® Firewall options that enable RADIUS-based user access control (using VLAN-ID and/or SSID-list).
- Confirm that the following option is available on the Cisco Secure ACS: Configuration > RADIUS (Cisco IOS/PIX). If this option is not available, add a device with network access server-type RADIUS (Cisco IOS/PIX). This device is needed to enable Cisco IOS/PIX attributes.
- After adding a Cisco IOS Software or Cisco PIX Firewall device, select Interface Configuration > RADIUS (Cisco IOS/PIX):
- Enable the "[026/009/001] cisco-av-pair" option. Enable this option at both User and Group levels.
- Click on "Submit."