Filter
Top Products
7-15
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-29225-01
Chapter 7 Configuring Multiple SSIDs
NAC Support for MBSSID
When a client associates and the RADIUS server determines that it is unhealthy, the server returns one
of the quarantine NAC VLANs in its RADIUS authentication response for dot1x authentication. This
VLAN should be one of the configured backup VLANs under the client SSID. If the VLAN is not one
of the configured backup VLANs, the client is disassociated.
Data corresponding to the all the backup VLANs are sent and received using the BSSID that is assigned
to the SSID. Therefore, all clients (healthy and unhealthy) listening to the BSSID corresponding the the
SSID wake up. Based on the multicast key being used corresponding to the VLAN (healthy or
unhealthy), packet decrypting takes place on the client. Wired side traffic is segregated because different
VLANs are used, thereby ensuring that traffic from infected and uninfected clients do not mix.
A new keyword, backup, is added to the existing vlan <name> | <id> under dot11 ssid <ssid> as
described below:
vlan <name>|<id> [backup <name>|<id>, <name>|<id>, <name>|<id>