© 2010 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction, translation, conversion into any electronic medium or machine scannable form is not permitted, either in whole or in part. An exception is the preparation of a backup copy of the software for your own use. For devices with embedded software, the end-user license agreement on the enclosed CD applies.
The performance features described here are binding only if they have been expressly agreed when the contract was made. This document was produced by Hirschmann Automation and Control GmbH according to the best of the company's knowledge. Hirschmann reserves the right to change the contents of this document without prior notice. Hirschmann can give no guarantee in respect of the correctness or accuracy of the information in this document.
Hirschmann can accept no responsibility for damages, resulting from the use of the network components or the associated operating software. In addition, we refer to the conditions of use specified in the license contract.
You can get the latest version of this manual on the Internet at the Hirschmann product site (www.hirschmann-ac.de).
Printed in Germany
Hirschmann Automation and Control GmbH Stuttgarter Str. 45-51
72654 Neckartenzlingen Germany
Multi-SSID
Multi SSID
Release 01 06/10 3
Multi-SSID
Common WLAN interfaces can operate just one single WLAN network. This could be either encrypted or unencrypted, secured or unsecured, subject to authentication, open to anybody, etc.
In LCOS it is possible to install up to eight WLAN networks that operate simultaneously, each network with its own different properties.
The techpaper summarises the possibilities and relevant interrelationships of Multi-SSID functions.
Possibilities
A WLAN network is uniquely identified by its SSID. SSID stands for Service Set Identifier. It represents the name of the wireless LAN.
Multi SSID is available for access points that can manage multiple SSIDs simultaneously to operate several WLAN networks in parallel. The WLAN networks using Multi SSID conform fully to the WLAN standard employed (IEEE 802.11a or IEEE 802.11g). The wireless LAN clients in the network do not have to meet any special requirements. Multi SSID is thus
compatible with all clients that conform with 802.11a or 802.11g. The possibilities offered by the Multi SSID feature are varied:
Different user groups within a company can work with the same WLAN infrastructure. They can be divided into different logical groups that may be separated from one another for security. Each group can also be assigned with different security settings.
In schools, pupils and teachers can be assigned to their own networks that, in combination with VLAN in the internal network, enable
completely different networks to be established on common physical infrastructure.
HotSpot providers using the Public Spot Option now require just one hardware platform to offer services from multiple providers. Each provider receives its own SSID. Customers using these SSIDs will be greeted with an http site that is especially tailored to the needs of the provider.
All of the clients in a WLAN HotSpot environment can be served with one SSID. Important properties, such as the MAC-address list
settings, or the activation of WEP or WAP encryption, are linked with this SSID. Every access is authenticated for the accurate billing of connection times. The administrator can be spared the inconvenience of authentication by setting up a separate SSID that enables access to the device only with the use of WEP or WPA, MAC-address list, or other security mechanisms.
Figure 1: SSID in a WLAN HotSpot ambience 1 SSID 1 2 SSID 2 3 SSID 3 4 SSID 4 5 Admin 6 Manager 7 Public 8 Engineering
9 User group #1: limited number
10 Public WLAN access (unencrypted) 11 User group #3: high safety
12 User grup #2: extra high safety 1 12 11 10 9 4 3 2 5 7 8 6
Multi-SSID
Multi SSID
Release 01 06/10 5
As can be seen from the diagram, the superordinated global settings for the frequency band (2.4 GHz or 5 GHz) are assigned to the physical interface according to the properties of the interface, the channel, the consideration of the MAC address list, point-to-point settings and the feature Super A/G. Settings for the physical interface apply to all SSIDs that are operated on this interface.
The first SSID is the one that would be active if no Multi-SSID were to be installed. The physical MAC address of the interface is assigned to this SSID.
In client mode, this is the only SSID that is available.
The use of 802.1x/EAP is also available only via this SSID.
The further virtual SSIDs two to eight are assigned with a locally
administered MAC address. This is necessary so that the WLAN client can take up contact to the (virtual) interface.
For following settings apply for each of the eight SSIDs:
WLAN data rate setting (automatic or fixed)
Definition of WPA/802.11i passphrase or WEP key 1
Utilisation of the global MAC address list yes/no
SSID broadcast on/off (hides the SSID)
User authentication on/off when using the Public Spot Option
VLAN tagging per SSID
DHCP server on/off
The distribution and utilisation of the four available WEP keys differs according to the SSID and the application:
Key 1 can be assigned to each SSID independently and is used as key 1 for WEP or as the passphrase for WPA/802.11i.
Keys 2-4 are defined globally if WEP is to be used with these keys. They can then be used by every SSID. Because they are global keys, they are the same for every SSID. As soon as 802.1x/EAP is to be used on the first SSID, these keys are then used for key rotation. This means that the keys cannot be used for the other SSIDs.
Figure 2: SSID Diagramm 802.1x-EAP pro SSID: - WPA passphrase - WEP key 1 - WLAN data rates
- MAC address liste on/off - authentication on/off - VLAN tagging
7 further SSIDs, WLAN-1-1 to
WLAN-1-7, each one „local administered“ MAC address 1. SSID WLAN-1, phys. MAC address Client mode Frequency band - Super A/G - MAC list - P2P Physical WLAN Interface WEP, keys 2-4
Further support
Multi SSID
Release 01 06/10 7
A Further support
Technical questions and training courses
In the event of technical queries, please contact your local Hirschmann distributor or Hirschmann office.
You can find the addresses of our distributors on the Internet: www.hirschmann-ac.com.
Our support line is also at your disposal:
Tel. +49 1805 14-1538
Fax +49 7127 14-1551
Answers to Frequently Asked Questions can be found on the Hirschmann internet site (www.hirschmann-ac.com) at the end of the product sites in the FAQ category.
The current training courses to technology and products can be found under http://www.hicomcenter.com.
Hirschmann Competence Center
In the long term, excellent products alone do not guarantee a successful customer relationship. Only comprehensive service makes a difference worldwide. In the current global competition scenario, the Hirschmann Competence Center is ahead of its competitors on three counts with its complete range of innovative services:
Consulting incorporates comprehensive technical advice, from system evaluation through network planning to project planing.
Training offers you an introduction to the basics, product briefing and user training with certification.
Support ranges from the first installation through the standby service to maintenance concepts.
With the Hirschmann Competence Center, you have decided against making any compromises. Our client-customized package leaves you free to choose the service components you want to use.
Internet:
