Cisco OL-8335-02 - Manuals

Contents vii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Configuring Multicast Mode 4-9 Understanding Multicast Mode 4-9 Guidelines for Using Multicast Mode 4-9 Enabling Multicast Mode 4-10 Configuring the Supervisor 720 to Support the WiSM 4-10 General WiSM Guidelines 4-10 Configur...

Contents viii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Configuring Identity Networking 5-16 Identity Networking Overview 5-16 RADIUS Attributes Used in Identity Networking 5-17 QoS-Level 5-17 ACL-Name 5-17 Interface-Name 5-18 VLAN-Tag 5-18 Tunnel Attributes 5-19 C H A P T E R 6 C...

Contents ix Cisco Wireless LAN Controller Configuration Guide OL-8335-02 C H A P T E R 7 Controlling Lightweight Access Points 7-1 Lightweight Access Point Overview 7-2 Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access Points 7-2 Cisco 1030 Remote Edge Lightweight Access Points 7-3 Cisco 1000 Se...

Contents x Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Erasing the Controller Configuration 8-4 Resetting the Controller 8-5 C H A P T E R 9 Configuring Radio Resource Management 9-1 Overview of Radio Resource Management 9-2 Radio Resource Monitoring 9-2 Dynamic Channel Assignment 9...

Contents xi Cisco Wireless LAN Controller Configuration Guide OL-8335-02 C H A P T E R 10 Configuring Mobility Groups 10-1 Overview of Mobility 10-2 Overview of Mobility Groups 10-5 Determining When to Include Controllers in a Mobility Group 10-7 Configuring Mobility Groups 10-7 Prerequisites 10-7 U...

Contents xii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 FCC Statements for Cisco 2000 Series Wireless LAN Controllers B-8 FCC Statements for Cisco 4100 Series Wireless LAN Controllers and Cisco 4400 Series Wireless LAN Controllers B-9 A P P E N D I X C End User License and Warranty...

xiv Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Audience Audience This guide describes Cisco Wireless LAN Controllers and Cisco Lightweight Access Points. This guide is for the networking professional who installs and manages these devices. To use this guide, you should be f...

xv Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Conventions Conventions This publication uses these conventions to convey instructions and information: Command descriptions use these conventions: • Commands and keywords are in boldface text. • Arguments for which you supply v...

xvii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Related Publications Related Publications These documents provide complete information about the Cisco Unified Wireless Network Solution: • Cisco Wireless LAN Controller Command Reference • Quick Start Guide : Cisco 2000 Serie...

xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Documentation Feedback Product Documentation DVD The Product Documentation DVD is a comprehensive library of technical product documentation on a portable medium. The DVD enables you to access multiple versions of installatio...

xix Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Cisco Product Security Overview Cisco Product Security Overview Cisco provides a free online Security Vulnerability Policy portal at this URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html From...

xx Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Obtaining Technical Assistance Obtaining Technical Assistance Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features exten...

xxi Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Obtaining Additional Publications and Information To open a service request by telephone, use one of the following numbers: Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)EMEA: +32 2 704 55 55USA: 1 800 553-2447 For a ...

1-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Cisco Wireless LAN Solution Overview Cisco Wireless LAN Solution Overview The Cisco Wireless LAN Solution is designed to provide 802.11 wireless networking solutions for enterprises and service providers. The Cisco W...

1-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Cisco Wireless LAN Solution Overview Figure 1-1 Cisco WLAN Solution Components Single-Controller Deployments A standalone controller can support lightweight access points across multiple floors and buildings simultan...

1-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Cisco Wireless LAN Solution Overview Figure 1-2 Single-Controller Deployment Multiple-Controller Deployments Each controller can support lightweight access points across multiple floors and buildings simultaneously. ...

1-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Operating System Software Figure 1-3 Typical Multi-Controller Deployment Operating System Software The operating system software controls Cisco Wireless LAN Controllers and Cisco 1000 Series Lightweight Access Points...

1-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Operating System Security • RSN with or without Pre-Shared key. • Cranite FIPS140-2 compliant passthrough. • Fortress FIPS140-2 compliant passthrough. • Optional MAC Filtering. The WEP problem can be further solved u...

1-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Layer 2 and Layer 3 LWAPP Operation Layer 2 and Layer 3 LWAPP Operation The LWAPP communications between Cisco Wireless LAN Controller and Cisco 1000 series lightweight access points can be conducted at ISO Data Link...

1-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Client Roaming The operator can monitor the master controller using the WCS Web User Interface and watch as access points associate with the master controller. The operator can then verify access point configuration ...

1-9 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Client Roaming Note that the Cisco 1030 remote edge lightweight access points at a remote location must be on the same subnet to support roaming. Inter-Subnet (Layer 3) Roaming In multiple-controller deployments, the...

1-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview External DHCP Servers External DHCP Servers The operating system is designed to appear as a DHCP Relay to the network and as a DHCP Server to clients with industry-standard external DHCP Servers that support DHCP Re...

1-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Cisco WLAN Solution Wired Connections Cisco WLAN Solution Wired Connections The Cisco Wireless LAN Solution components communicate with each other using industry-standard Ethernet cables and connectors. The followin...

1-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Access Control Lists Access Control Lists The operating system allows you to define up to 64 Access Control Lists (ACLs), similar to standard firewall Access Control Lists. Each ACL can have up to 64 Rules (filters)...

1-13 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview File Transfers Enhanced Integration with Cisco Secure ACS The identity-based networking feature uses authentication, authorization, and accounting (AAA) override. When the following vendor-specific attributes are pr...

1-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Power over Ethernet Power over Ethernet Lightweight access points can receive power via their Ethernet cables from 802.3af-compatible Power over Ethernet (PoE) devices, which can reduce the cost of discrete power su...

1-15 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Intrusion Detection Service (IDS) • Allows changes to Cisco 1000 series lightweight access point sensitivity for pico cells. • Allows control of Cisco 1000 series lightweight access point fallback behavior to optimi...

1-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms Cisco 2000 Series Wireless LAN Controllers The Cisco 2000 Series Wireless LAN Controller is part of the Cisco Wireless LAN Solution. Each 2000 series controller controls up to six C...

1-17 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms Cisco 4400 Series Wireless LAN Controllers Cisco 4400 Series Wireless LAN Controllers are part of the Cisco Wireless LAN Solution. Each Cisco 4400 Series Wireless LAN Controller con...

1-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms Cisco 4100 Series Wireless LAN Controller Model Numbers Cisco 4100 Series Wireless LAN Controller model numbers are as follows: • AIR-WLC4112-K9 — The Cisco 4100 Series Wireless LAN...

1-19 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms The 4402 Cisco 4400 Series Wireless LAN Controller uses one set of two redundant front-panel SX/LC/T SFP modules (SFP transceiver, or Small Form-factor Plug-in), and the 4404 Cisco ...

1-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms • Enables and/or disables the 802.11a, 802.11b and 802.11g Cisco 1000 series lightweight access point networks. • Enables or disables Radio Resource Management (RRM). To use the Sta...

1-21 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms • If the access point finds no master controller on the same subnet, it attempts to contact stored Mobility Group members by IP address. • Should none of the Mobility Group members ...

1-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Wireless LAN Controller Platforms Cisco 2000 Series Wireless LAN Controllers Cisco 2000 Series Wireless LAN Controllers can communicate with the network through any one of its physical data ports, as the logical man...

1-24 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Rogue Access Points Figure 1-7 Physical Network Connections to 4402 and 4404 Series Controllers VPN and Enhanced Security Modules for 4100 Series Controllers All 4100 series controllers can be equipped with an optio...

1-25 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Web User Interface and the CLI Rogue Access Point Location, Tagging, and Containment This built-in detection, tagging, monitoring, and containment capability allows system administrators to take required actions: • ...

1-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 1 Overview Web User Interface and the CLI Because the Web User Interface works with one Cisco Wireless LAN Controller at a time, the Web User Interface is especially useful when you wish to configure or monitor a single Cisco ...

2-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the Web-Browser and CLI Interfaces Using the Web-Browser Interface Using the Web-Browser Interface The web-browser interface (hereafter called the GUI) allows up to five users to browse simultaneously into the controlle...

2-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the Web-Browser and CLI Interfaces Enabling Web and Secure Web Modes Using the CLI, follow these steps to enable HTTPS: Step 1 Enter show certificate summary to verify that the controller has generated a certificate: &g...

2-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the Web-Browser and CLI Interfaces Using the CLI Step 9 Reboot the controller: > reset system Are you sure you would like to reset the system? (y/n) y System will now restart! The controller reboots. Disabling the GU...

2-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the Web-Browser and CLI Interfaces Using the CLI Using a Local Serial Connection You need these items to connect to the serial port: • A computer that has a DB-9 serial port and is running a terminal emulation program •...

2-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the Web-Browser and CLI Interfaces Using the CLI Logging Out of the CLI When you finish using the CLI, navigate to the root level and enter logout . The system prompts you to save any changes you made to the volatile RA...

3-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces Overview of Ports and Interfaces Three concepts are key to understanding how controllers connect to a wireless network: ports, interfaces, and WLANs. Ports A p...

3-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces Note Figure 3-3 shows a Cisco 4404 controller. The Cisco 4402 controller is similar but has only two distribution system ports. Table 3-1 provides a list of po...

3-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces • The Cisco WiSM has eight gigabit Ethernet distribution system ports, which are located on the Catalyst 6500 switch backplane. Through these ports, the contro...

3-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces Interfaces An interface is a logical entity on the controller. An interface has multiple parameters associated with it, including an IP address, default-gatewa...

3-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces Note If the service port is in use, the management interface must be on a different subnet from the service-port interface. AP-Manager Interface A controller h...

3-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces unused gateway IP address, such as 1.1.1.1. The virtual interface IP address is not pingable and should not exist in any routing table in your network. In addi...

3-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Overview of Ports and Interfaces WLANs A WLAN associates a service set identifier (SSID) to an interface. It is configured with security, quality of service (QoS), radio policies, and other wi...

3-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring the Management, AP-Manager, Virtual, and Service-Port Interfaces Using the CLI to Configure the Management, AP-Manager, Virtual, and Service-Port Interfaces This section provides ...

3-13 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring the Management, AP-Manager, Virtual, and Service-Port Interfaces Step 3 Enter config wlan disable wlan-number to disable each WLAN that uses the AP-manager interface for distribut...

3-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Dynamic Interfaces Using the CLI to Configure the Service-Port Interface Follow these steps to display and configure the service-port interface parameters using the CLI. Step 1 En...

3-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Dynamic Interfaces Step 5 Configure the following parameters: • VLAN identifier • Fixed IP address, IP netmask, and default gateway • Physical port assignment • Primary and second...

3-17 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Ports Step 5 Enter show interface detailed operator-defined-interface-name and show interface summary to verify that your changes have been saved. Note If desired, you can enter c...

3-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Ports Step 4 Click Save Configuration to save your changes. Step 5 Click Back to return to the Ports page and review your changes. Step 6 Repeat this procedure for each additional...

3-21 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Ports b. Click Detail for the access point on which you want to enable mirror mode. The All APs > Details page appears. c. Under General, set the Mirror Mode parameter to Enabl...

3-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Ports Using the GUI to Configure Spanning Tree Protocol Follow these steps to configure STP using the GUI. Step 1 Click Controller > Ports to access the Ports page (see Figure ...

3-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring Ports Step 9 Click Save Configuration to save your changes. Using the CLI to Configure Spanning Tree Protocol Follow these steps to configure STP using the CLI. Step 1 Enter show ...

3-27 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Enabling Link Aggregation Step 10 After you configure STP settings for the ports, enter config spanningtree switch mode enable to enable STP for the controller. The controller automatically d...

3-28 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Enabling Link Aggregation When configuring bundled ports, you may want to consider spanning modules with your port channel when you connect to a modular switch such as the Catalyst 6500. This...

3-29 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Enabling Link Aggregation LAG is typically configured using the Startup Wizard, but you can enable or disable it at any time through either the GUI or CLI. Using the GUI to Enable Link Aggreg...

3-30 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring a 4400 Series Controller to Support More Than 48 Access Points Using the CLI to Enable Link Aggregation Follow these steps to enable LAG on your controller using the CLI. Step 1 E...

3-31 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring a 4400 Series Controller to Support More Than 48 Access Points The following factors should help you decide which method to use if your controller is set for Layer 3 operation: • ...

3-36 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configuring Ports and Interfaces Configuring a 4400 Series Controller to Support More Than 48 Access Points Step 5 Enter the appropriate interface parameters. Step 6 To make the interface an AP-manager interface, check the E...

4-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Using the Configuration Wizard Using the Configuration Wizard This section describes how to configure basic settings on a controller for the first time or after the configuration has been reset...

4-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Using the Configuration Wizard Resetting the Device to Default Settings If you need to start over during the initial setup process, you can reset the controller to factory default settings. Not...

4-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Using the Configuration Wizard Running the Configuration Wizard on the CLI When the controller boots at factory defaults, the bootup script runs the configuration wizard, which prompts the inst...

4-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Managing the System Time and Date Step 18 Enter a country code for the unit. Enter help to list the supported countries. Note When you run the wizard on a wireless controller network module ins...

4-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Enabling and Disabling 802.11 Bands Table 4-1 lists commonly used country codes and the 802.11 bands that they allow. For a complete list of country codes supported per product, refer to www.ci...

4-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Configuring Administrator Usernames and Passwords Enter config 80211a disable network to disable 802.11a operation on the controller. Enter config 80211a enable network to re-enable 802.11a ope...

4-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Enabling 802.3x Flow Control Step 3 Enter config snmp community accessmode ro name to configure an SNMP community name with read-only privileges. Enter config snmp community accessmode rw name ...

4-9 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Configuring Multicast Mode Configuring Multicast Mode If your network supports packet multicasting you can configure the multicast method that the controller uses. The controller performs multi...

4-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Configuring the Supervisor 720 to Support the WiSM • When using Multiple controllers on the network, make sure that the same multicast address is configured on all the controllers. • Multicast...

4-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Configuring the Supervisor 720 to Support the WiSM General WiSM Guidelines Keep these general guidelines in mind when you add a WiSM to your network: • The switch ports leading to the controll...

4-13 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 4 Configuring Controller Settings Using the Wireless LAN Controller Network Module Using the Wireless LAN Controller Network Module Keep these guidelines in mind when using a wireless LAN controller network module (CNM) instal...

5-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Cisco WLAN Solution Security Cisco WLAN Solution Security Cisco WLAN Solution Security includes the following sections: • Security Overview, page 5-2 • Layer 1 Solutions, page 5-2 • Layer 2 Solu...

5-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Cisco WLAN Solution Security Layer 3 Solutions The WEP problem can be further solved using industry-standard Layer 3 security solutions, such as VPNs (virtual private networks), L2TP (Layer Two ...

5-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring the System for SpectraLink NetLink Telephones for and notify when active), or marking them as Contained rogue access points (have between one and four Cisco 1000 Series lightweight a...

5-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring the System for SpectraLink NetLink Telephones Using the GUI to Enable Long Preambles Use this procedure to use the GUI to enable long preambles to optimize the operation of SpectraLi...

5-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Using Management over Wireless Step 3 Enter config 802.11b disable network to disable the 802.11b/g network. (You cannot enable long preambles on the 802.11a network.) Step 4 Enter config 802.11...

5-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring DHCP Using the CLI to Enable Management over Wireless Step 1 In the CLI, use the show network command to verify whether the Mgmt Via Wireless Interface is Enabled or Disabled. If Mgm...

5-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Using the CLI to Configure DHCP Follow these steps to use the CLI to configure DHCP. Step 1 In the CLI, enter show wlan to verify whether you have...

5-9 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Default Web Authentication Operation When web authentication is enabled, clients might receive a web-browser security alert the first time that th...

5-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Figure 5-3 Typical Successful Login Window The default login successful window contains a pointer to a virtual gateway address URL, redirect http...

5-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Changing the Web Message Use this command to change the Web Authentication Login window message: config custom-web webmessage message To reset th...

5-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Creating a Custom URL Redirect Cr eating a Custom URL Red irect Use this command to redirect all web authentication clients to a specific URL (in...

5-15 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizing the Web Authentication Login Screen Example: Sample Customized Web Authentication Login Window Figure 5-4 shows a customized Web Authentication Login window and the CLI commands use...

5-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring Identity Networking Configuring Identity Networking These sections explain the Identity Networking feature, how it is configured, and the expected behavior for various security poli...

5-17 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring Identity Networking RADIUS Attributes Used in Identity Networking This section explains the RADIUS attributes used in Identity Networking. QoS-Level This attribute indicates the Qua...

5-19 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configuring Identity Networking • Tag – The Tag field is one octet in length and is intended to provide a means of grouping attributes in the same packet which refer to the same tunnel. If the ...

6-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Wireless LAN Overview Wireless LAN Overview The Cisco Wireless LAN Solution can control up to 16 wireless LANs for lightweight access points. Each wireless LAN has a separate wireless LAN ID (1 through 16), ...

6-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs Activating Wireless LANs After you have completely configured your wireless LAN settings, enter config wlan enable wlan-id to activate the wireless LAN. Assigning a Wireless LAN to ...

6-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs Configuring a Timeout for Disabled Clients You can configure a timeout for disabled clients. Clients who fail to authenticate three times when attempting to associate are automatica...

6-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs • If you want to change the 802.1X encryption level for a wireless LAN, use this command: config wlan security 802.1X encryption wlan-id [ 40 | 104 | 128 ] – Use the 40 option to sp...

6-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs Configuring a Wireless LAN for Both Static and Dynamic WEP You can configure up to four wireless LANs to support static WEP keys, and you can also configure dynamic WEP on any of th...

6-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs IKE Authentication IPSec IKE (Internet Key Exchange) uses pre-shared key exchanges, x.509 (RSA Signatures) certificates, and XAuth-psk for authentication. Enter these commands to en...

6-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Configuring Wireless LANs IPSec Passthrough IPSec IKE uses IPSec Passthrough to allow IPSec-capable clients to communicate directly with other IPSec equipment. IPSec Passthrough is also known as VPN Passthro...

7-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightweight Access Point Overview Lightweight Access Point Overview This section describes Cisco lightweight access points. Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access Points Th...

7-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightweight Access Point Overview Cisco 1030 Remote Edge Lightweight Access Points The only exception to the general rule of lightweight access points being continuously controlled by Cis...

7-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightweight Access Point Overview Note that the Cisco 1030 remote edge lightweight access point must have a DHCP server available on its local subnet, so it can obtain an IP address upon ...

7-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightweight Access Point Overview Note that the wireless LAN operator can disable either one of each pair of the Cisco 1000 series lightweight access point internal antennas to produce a ...

7-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightweight Access Point Overview Cisco 1000 Series Lightweight Access Point Connectors The AP1020 and AP1030 Cisco 1000 series lightweight access points have the following external conne...

7-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Using the DNS for Controller Discovery Cisco 1000 Series Lightweight Access Point External Power Supply The Cisco 1000 series lightweight access point can receive power from an external 1...

7-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Dynamic Frequency Selection Dynamic Frequency Selection The Cisco Wireless LAN solution complies with regulations in Europe and Singapore that require radio devices to use Dynamic Frequen...

7-9 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Autonomous Access Points Converted to Lightweight Mode You can use an upgrade conversion tool to convert autonomous Cisco Aironet 11...

7-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Using a Controller to Return to a Previous Release Follow these steps to revert from lightweight mode to autonomous mode using a wi...

7-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Controllers Accept SSCs from Access Points Converted to Lightweight Mode The lightweight access point protocol (LWAPP) secures the ...

7-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Converted Access Points Send Crash Information to Controller When a converted access point unexpectedly reboots, the access point s...

8-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 8 Managing Controller Software and Configurations Transferring Files to and from a Controller Transferring Files to and from a Controller Controllers have built-in utilities for uploading and downloading software, certificates,...

8-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 8 Managing Controller Software and Configurations Saving Configurations Step 8 The controller now has the code update in active volatile RAM, but you must enter reset system to save the code update to non-volatile NVRAM and reb...

8-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 8 Managing Controller Software and Configurations Resetting the Controller Step 3 Follow the instructions in the “Using the Configuration Wizard” section on page 4-2 to complete the initial configuration. Resetting the Controll...

9-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overview of Radio Resource Management Overview of Radio Resource Management The radio resource management (RRM) software embedded in the controller acts as a built-in RF engineer to consi...

9-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overview of Radio Resource Management Dynamic Channel Assignment Two adjacent access points on the same channel can cause either signal contention or signal collision. In the case of a co...

9-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overview of Radio Resource Management The controller combines this RF characteristic information with RRM algorithms to make system-wide decisions. Conflicting demands are resolved using ...

9-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overview of RF Groups RRM Benefits RRM produces a network with optimal capacity, performance, and reliability while enabling you to avoid the cost of laborious historical data interpretat...

9-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Configuring an RF Group The RF group leader analyzes real-time radio data collected by the system and calculates the master power and channel plan. The RRM algorithms try to optimize arou...

9-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Configuring an RF Group Using the GUI to Configure an RF Group Follow these steps to create an RF group using the GUI. Step 1 Click Controller > General to access the General page (see...

9-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Viewing RF Group Status Using the CLI to Configure RF Groups Follow these steps to configure an RF group using the CLI. Step 1 Enter config network rf-network-name name to create an RF gr...

9-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Viewing RF Group Status The top of this page shows the details of the RF group, specifically how often the group information is updated (600 seconds by default), the MAC address of the R...

9-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Enabling Rogue Access Point Detection Enabling Rogue Access Point Detection After you have created an RF group of controllers, you need to configure the access points connected to the co...

9-15 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Configuring Dynamic RRM Using the CLI to Enable Rogue Access Point Detection Follow these steps to enable rogue access point detection using the CLI. Step 1 Make sure that each controlle...

9-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Configuring Dynamic RRM Using the GUI to Configure Dynamic RRM Follow these steps to configure dynamic RRM parameters using the GUI. Step 1 Access the Global Parameters > Auto RF page...

9-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Configuring Dynamic RRM Step 3 Click Save Configuration to save your changes. Step 4 Repeat this procedure to set the same parameter values for every controller in the RF group. Using th...

9-23 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overriding Dynamic RRM Step 3 Perform one of the following: • To have RRM automatically set the transmit power for all 802.11a or 802.11b/g radios at periodic intervals, enter one of the...

9-27 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Overriding Dynamic RRM Disabling Dynamic Channel and Power Assignment Globally for a Controller This section provides instructions for disabling dynamic channel and power assignment usin...

9-28 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 9 Configuring Radio Resource Management Viewing Additional RRM Settings Using the CLI Viewing Additional RRM Settings Using the CLI Use these commands to view additional 802.11a and 802.11b/g RRM settings: • show advanced 802....

10-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Overview of Mobility Overview of Mobility Mobility , or roaming , is a wireless LAN client’s ability to maintain its association seamlessly from one access point to another securely and with as l...

10-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Overview of Mobility Groups Note Both inter-controller roaming and inter-subnet roaming require the controllers to be in the same mobility group. See the next two sections for a description of mo...

10-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configuring Mobility Groups Note Clients may roam between access points in different mobility groups, provided they can hear them. However, their session information is not carried between contro...

10-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configuring Mobility Groups • All controllers must be configured with the same virtual interface IP address. Note If necessary, you can change the virtual interface IP address by editing the virt...

10-11 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configuring Auto-Anchor Mobility Using the CLI to Configure Mobility Groups Follow these steps to configure mobility groups using the CLI. Step 1 Enter show mobility summary to check the current...

10-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configuring Auto-Anchor Mobility WLAN and creates a foreign session for the client on the local switch. Packets from the client are encapsulated through a mobility tunnel using EtherIP and sent ...

10-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configuring Auto-Anchor Mobility Using the CLI to Configure Auto-Anchor Mobility Use these commands to configure auto-anchor mobility using the CLI. 1. Enter config wlan disable wlan-id to disab...

A-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Safety Considerations Safety Considerations Keep these guidelines in mind when installing Cisco Wireless LAN Solution products: • The Cisco 1000 Series lightweight access ...

A-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Class 1 Laser Product Warning Class 1 Laser Product Warning Note The 1000BASE-SX and 1000BASE-LX SFP modules and AIR-WLC4112-K9, AIR-WLC4124-K9, and AIR-WLC4136-K9 Cisco 4...

A-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Ground Conductor Warning Ground Conductor Warning Warning This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a s...

A-9 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Chassis Warning for Rack-Mounting and Servicing Chassis Warning for Rack-Mounting and Servicing Warning To prevent bodily injury when mounting or servicing this unit in a ...

A-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Battery Handling Warning for 4400 Series Controllers Battery Handling Warning for 4400 Series Controllers Warning There is the danger of explosion if the Cisco 4400 Serie...

A-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations and Translated Safety Warnings Equipment Installation Warning Equipment Installation Warning Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipmen...

B-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulatory Information for 1000 Series Access Points Regulatory Information for 1000 Series Access Points This section contains regulatory information for 1000 series acc...

B-3 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulatory Information for 1000 Series Access Points occur. If this equipment does cause interference to radio or television reception, which can be determined by turning...

B-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulatory Information for 1000 Series Access Points Note This equipment is intended to be used in all EU and EFTA countries. Outdoor use may be restricted to certain fre...

B-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulatory Information for 1000 Series Access Points Guidelines for Operating Cisco Aironet Access Points in Japan This section provides guidelines for avoiding interfere...

B-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulatory Information for 1000 Series Access Points Administrative Rules for Cisco Aironet Access Points in Taiwan This section provides administrative rules for operati...

B-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information FCC Statements for Cisco 2000 Series Wireless LAN Controllers English Translation Administrative Rules for Low-power Radio-Frequency Devices Article 12 For those low-powe...

C-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix C End User License and Warranty End User License Agreement End User License Agreement End User License A greement IMPORTANT: PLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY. DOWNLOADING, INSTALLING OR USING CISCO OR CISC...

C-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix C End User License and Warranty Limited Warranty Term and Termination. This Agreement and the license granted herein shall remain effective until terminated. Customer may terminate this Agreement and the license at any time by...

C-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix C End User License and Warranty General Terms Applicable to the Limited Warranty Statement and End User License Agreement Disclaimer of Warranty DISCLAIMER OF WARRANTY EXCEPT AS SPECIFIED IN THIS WARRANTY, ALL EXPRESS OR IMPLI...

C-7 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix C End User License and Warranty Additional Open Source Terms the parties with respect to the license of the Software and Documentation and supersedes any conflicting or additional terms contained in any purchase order or elsew...

D-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Access Point LED Patterns System Messages System Messages Table D-1 lists system messages and descriptions. Table D-1 System Messages and Descriptions Error Message Description STATION_DISASSOCIATE Client...

D-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Access Point LED Patterns Using Client Reason and Status Codes in Trap Logs Using Client Reason and Status Codes in Trap Logs The WCS Clients > Detail page lists the reason and status codes that you ar...

D-5 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Access Point LED Patterns Using Client Reason and Status Codes in Trap Logs Client Status Codes This table lists client status codes. Client S tatus Codes 2 previousAuthNotValid Client associated but not ...

D-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Access Point LED Patterns Using Lightweight Access Point LEDs Using Lightweight Access Point LEDs This table describes the meaning of LED patterns on lightweight access points. Table D-4 Cisco 1000 Series...

IN-1 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 I N D E X Numerics 7920 support mode 6-9 802.11 bands, enabling and disabling 4-6 802.1X dynamic key settings 6-4 802.3x flow control 4-8 A access point LEDs xiv, D-1 access points configuring 4400 series controller to support more th...