We have a client that currently has Cisco 1242 AP installed. They have some older mobile printers that do not support WPA.
The printers are Zebra QL320, QL320+ and QL320-N.
Is it possible to setup two VLANs on the same AP, one with WEP and the second one with WPA?
Thanks in advance for any help you can provide.
I am guessing you don't have a controller ?
The short answer is that you can have multiple SSID's with different encryption using VLAN's.
Bear in mind though the VLAN's are seperate broadcast domains, meaning different IP addresses. You will need to have a VLAN aware switch and some kind of access list to allow all devices on both VLAN's to see the printers, and VLAN aware routers to allow the whole lot out to the internet.
Linksys provide good kit at reasonable cost if you don't want to go with Cisco switches.
Thanks for the answer.
They have Cisco switches in place.
Both WEP and WPA will need access to internet. No devices on the WEP will need to communicate with devices on the WPA.
There are two sets of devices at each location. Each set includes one hand held barcode scanner and one mobile (handheld) printer.
We are having them ship one set back to us. We set it up with the new OS (and software) and WPA-PSK. Once we ship it back and verify that it works on their network, they will ship the 2nd one back to us. Once all devices have been updated with new OS and WPA we will shut off the WEP.
We just need both to work till we get all 650 sets updated. They are located all across the US, so we can't do all at once.
as our frnd neilmac said , it is very well possible. you need to use MBSSID mode of the AP , create multiple vlan , define security for each one and assign them to proper WLAN.
you can refer to config guides on cisco site , there must be some .
The answer to your first question is an unqualified yes - if you have enterprise AP's.
As far as the printers you mentioned, they were in fact were all tested using exactly the security/VLAN structure you describe.
Because of the large number of security options that are possible, that requires up to four AP's to cover all the possibilities. (16 SSID's each)
Of course, with such a high SSID/AP count, these are not high throughput tests. Throughput tests were/are performed on other AP's, usually in another lab in the same Zebra building.
The Zebra "extended connectivity test" involves a seven day (24/7) test where no printer can permanently drop its connection, for any reason. If any manual intervention is required to reconnect the printer, it is deemed to have failed the test.
Given power system (So Cal Edison) issues, and IT networking problems, that test has never taken less than about 10 days to complete - in the previous eleven years in Agoura Hills and Camarillo, CA.
I think your article mentioned a certain aspect of the problem. I think it has a lot more to study than that