VAP - SSID

An SSID may be associated to any defined interface. This association ties the dataplane of the VAP together with the underlying interface services.

Most common SSID configuration parameters have been exposed via the Provisioning UI. Consult the OpenWiFi data model for the full list of available configurations.

From an interface select Add SSID.

Assigning the name of the SSID is also the name of the Wi-Fi network itself. Operating band of the SSID is configurable by radio.

SSID Configuration Options

Option	Description
Name	SSID name
BSS-Mode	Operating mode of the wireless interface Options: ap, sta, mesh, wds-ap, wds-sta
WiFi-Bands	Radio selection(s) of the SSID
Authentication Protocol	Wireless encryption of the BSS Options: None, WPA-PSK, WPA2-PSK, PSK2-RADIUS, WPA-PSK/WPA2-PSK Personal Mixed, WPA-Enterprise, WPA2-Enterprise EAP-TLS, WPA-Enterprise-Mixed, SAE, WPA2/WPA3 Transitional, WPA3-Enterprise EAP-TLS, WPA3-192-Enterprise EAP-TLS
Authentication Key	Pre-Share dKey (when applicable)
Authentication IEEE80211w	Management Frame Protection Options: disabled, optional, required
Advanced
Hidden-SSID	Disable Beacon Frame Broadcast
Services	Services associated to the SSID logical interface
Maximum-Clients	Total associations permitted to the SSID
Purpose	Role the SSID performs Options: Default, Onboarding-AP, Onboarding-sta
Isolate-Clients	BSS client isolation
Power-Save	Unscheduled Automatic Power Save Delivery
Broadcast-Time	Beacon Time Broadcast
Unicast-Conversion	Convert Multicast to Unicast over BSS
Proxy-ARP	BSS respond to host ARP on behalf of another client
Disassoc-Low-Ack	Disassociate stations based on excessive transmission failures or other indications of connection loss
Vendor-Elements	This option allows embedding custom vendor specific IEs inside the beacons of a BSS in AP mode.
Multi-PSK	Per device shared key to associate with unique VLAN
Rate Limit	Ingress-rate and Egress-rate in Mb/s
RRM	Neighbor reporting LCI measurement element content Civic-Location element content FTM-Responder Fine Timing Measurement Stationary-AP
Roaming	Message-Exchange Generate PSK Domain-Identifier PMK-R0-Key-Holder PMK-R1-Key-Holder

Option

Description

Name

SSID name

BSS-Mode

Operating mode of the wireless interface Options: ap, sta, mesh, wds-ap, wds-sta

WiFi-Bands

Radio selection(s) of the SSID

Authentication Protocol

Wireless encryption of the BSS Options: None, WPA-PSK, WPA2-PSK, PSK2-RADIUS, WPA-PSK/WPA2-PSK Personal Mixed, WPA-Enterprise, WPA2-Enterprise EAP-TLS, WPA-Enterprise-Mixed, SAE, WPA2/WPA3 Transitional, WPA3-Enterprise EAP-TLS, WPA3-192-Enterprise EAP-TLS

Authentication Key

Pre-Share dKey (when applicable)

Authentication IEEE80211w

Management Frame Protection Options: disabled, optional, required

Advanced

Hidden-SSID

Disable Beacon Frame Broadcast

Services

Services associated to the SSID logical interface

Maximum-Clients

Total associations permitted to the SSID

Purpose

Role the SSID performs Options: Default, Onboarding-AP, Onboarding-sta

Isolate-Clients

BSS client isolation

Power-Save

Unscheduled Automatic Power Save Delivery

Broadcast-Time

Beacon Time Broadcast

Unicast-Conversion

Convert Multicast to Unicast over BSS

Proxy-ARP

BSS respond to host ARP on behalf of another client

Disassoc-Low-Ack

Disassociate stations based on excessive transmission failures or other indications of connection loss

Vendor-Elements

This option allows embedding custom vendor specific IEs inside the beacons of a BSS in AP mode.

Multi-PSK

Per device shared key to associate with unique VLAN

Rate Limit

Ingress-rate and Egress-rate in Mb/s

RRM

Neighbor reporting LCI measurement element content Civic-Location element content FTM-Responder Fine Timing Measurement Stationary-AP

Roaming

Message-Exchange Generate PSK Domain-Identifier PMK-R0-Key-Holder PMK-R1-Key-Holder

PreviousWAN NextInventory Association

Last updated 1 year ago

Option	Description
Name	SSID name
BSS-Mode	Operating mode of the wireless interface Options: ap, sta, mesh, wds-ap, wds-sta
WiFi-Bands	Radio selection(s) of the SSID
Authentication Protocol	Wireless encryption of the BSS Options: None, WPA-PSK, WPA2-PSK, PSK2-RADIUS, WPA-PSK/WPA2-PSK Personal Mixed, WPA-Enterprise, WPA2-Enterprise EAP-TLS, WPA-Enterprise-Mixed, SAE, WPA2/WPA3 Transitional, WPA3-Enterprise EAP-TLS, WPA3-192-Enterprise EAP-TLS
Authentication Key	Pre-Share dKey (when applicable)
Authentication IEEE80211w	Management Frame Protection Options: disabled, optional, required
Advanced
Hidden-SSID	Disable Beacon Frame Broadcast
Services	Services associated to the SSID logical interface
Maximum-Clients	Total associations permitted to the SSID
Purpose	Role the SSID performs Options: Default, Onboarding-AP, Onboarding-sta
Isolate-Clients	BSS client isolation
Power-Save	Unscheduled Automatic Power Save Delivery
Broadcast-Time	Beacon Time Broadcast
Unicast-Conversion	Convert Multicast to Unicast over BSS
Proxy-ARP	BSS respond to host ARP on behalf of another client
Disassoc-Low-Ack	Disassociate stations based on excessive transmission failures or other indications of connection loss
Vendor-Elements	This option allows embedding custom vendor specific IEs inside the beacons of a BSS in AP mode.
Multi-PSK	Per device shared key to associate with unique VLAN
Rate Limit	Ingress-rate and Egress-rate in Mb/s
RRM	Neighbor reporting LCI measurement element content Civic-Location element content FTM-Responder Fine Timing Measurement Stationary-AP
Roaming	Message-Exchange Generate PSK Domain-Identifier PMK-R0-Key-Holder PMK-R1-Key-Holder