Page 2 - Access Point Communication Protocols; Guidelines for Using CAPWAP; The Controller Discovery Process
7-2 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Access Point Communication Protocols Access Point Communication Protocols In controller software release 5.2 or later, Cisco lightweight access points use the IETF standard Control and P...
Page 4 - Verifying that Access Points Join the Controller; Using the GUI to Verify that Access Points Join the Controller
7-4 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Access Point Communication Protocols domain name. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-LWAPP-CONTROLLE...
Page 5 - Viewing CAPWAP MTU Information; Configuring Global Credentials for Access Points
7-5 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Global Credentials for Access Points Viewing CAPWAP MTU Information To view the maximum transmission unit (MTU) for the CAPWAP path on the controller, enter this command. The...
Page 6 - Using the GUI to Configure Global Credentials for Access Points
7-6 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Global Credentials for Access Points Also in controller software release 5.0 or later, after an access point joins the controller, the access point enables console port secur...
Page 8 - Using the CLI to Configure Global Credentials for Access Points
7-8 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Global Credentials for Access Points Using the CLI to Configure Global Credentials for Access Points Using the controller CLI, follow these steps to configure global credenti...
Page 9 - Configuring Authentication for Access Points
7-9 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Authentication for Access Points Information similar to the following appears: Cisco AP Identifier.............................. 0 Cisco AP Name.................................
Page 10 - Using the GUI to Configure Authentication for Access Points
7-10 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Authentication for Access Points Note If you choose to follow this suggested flow and enable 802.1X authentication on the switch port after the access point has joined the c...
Page 12 - Using the CLI to Configure Authentication for Access Points
7-12 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Authentication for Access Points f. Click Apply to commit your changes. g. Click Save Configuration to save your changes. Note If you ever want to force this access point to...
Page 14 - Configuring the Switch for Authentication; Embedded Access Points
7-14 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Embedded Access Points Configuring the Switch for Authentication On the switch CLI, enter these commands to enable 802.1X authentication on a switch port: Switch# configure terminal Swi...
Page 16 - Autonomous Access Points Converted to Lightweight Mode
7-16 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Autonomous Access Points Converted to Lightweight Mode You can use an upgrade conversion tool to convert autonomous Cisco Aironet ...
Page 17 - Reverting from Lightweight Mode to Autonomous Mode; Using a Controller to Return to a Previous Release
7-17 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Reverting from Lightweight Mode to Autonomous Mode After you use the upgrade tool to convert an autonomous access point to lightwe...
Page 18 - Authorizing Access Points; Authorizing Access Points Using SSCs
7-18 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Step 8 Wait until the access point reboots as indicated by all LEDs turning green followed by the Status LED blinking green. Step ...
Page 19 - Authorizing Access Points Using LSCs; Using the GUI to Configure LSC
7-19 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Authorizing Access Points Using LSCs You can use an LSC if you want your own public key infrastructure (PKI) to provide better sec...
Page 20 - Using the CLI to Configure LSC
7-20 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Step 7 To add the CA certificate into the controller’s CA certificate database, hover your cursor over the blue drop-down arrow fo...
Page 22 - Using the GUI to Authorize Access Points
7-22 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Step 10 To view details about the access points that are provisioned using LSC, enter this command: show certificate lsc ap-provis...
Page 23 - Using the CLI to Authorize Access Points
7-23 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode c. From the Certificate Type drop-down box, choose MIC , SSC , or LSC . d. Click Add . The access point appears in the access poin...
Page 24 - Using DHCP Option 43 and DHCP Option 60
7-24 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Using DHCP Option 43 and DHCP Option 60 Cisco Aironet access points use the type-length-value (TLV) format for DHCP option 43. DHC...
Page 26 - Configuring the Syslog Server for Access Points; Viewing Access Point Join Information
7-26 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Configuring the Syslog Server for Access Points Follow these steps to configure the syslog server for access points using the cont...
Page 28 - Converted Access Points Send Crash Information to Controller
7-28 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Last AP disconnect details - Reason for last AP connection failure.................... The AP has been reset by the controller Las...
Page 29 - Using the CLI to Retrieve Radio Core Dumps; Using the GUI to Upload Radio Core Dumps
7-29 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Using the CLI to Retrieve Radio Core Dumps Using the controller CLI, follow these steps to retrieve the radio core dump file. Step...
Page 30 - Using the CLI to Upload Radio Core Dumps
7-30 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Step 6 In the File Name field, enter the name of the radio core dump file. Note The filename that you enter should match the filen...
Page 31 - Uploading Memory Core Dumps from Converted Access Points; Using the GUI to Upload Access Point Core Dumps
7-31 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Uploading Memory Core Dumps from Converted Access Points By default, access points converted to lightweight mode do not send memor...
Page 32 - Using the CLI to Upload Access Point Core Dumps; Display of MAC Addresses for Converted Access Points
7-32 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Using the CLI to Upload Access Point Core Dumps Using the controller CLI, follow these steps to upload a core dump file of the acc...
Page 33 - Supporting Oversized Access Point Images
7-33 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Disabling the Reset Button on Access Points Converted to Lightweight Mode You can disable the reset button on access points conver...
Page 34 - Cisco Workgroup Bridges
7-34 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Cisco Workgroup Bridges Follow these steps to perform the TFTP recovery procedure. Step 1 Download the required recovery image from Cisco.com (c1100-rcvk9w8-mx, c1200-rcvk9w8-mx, or c13...
Page 35 - Guidelines for Using WGBs
7-35 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Cisco Workgroup Bridges Guidelines for Using WGBs Follow these guidelines for using WGBs on your network: • The WGB can be any autonomous access point that supports the workgroup bridge...
Page 37 - Sample WGB Configuration; Using the GUI to View the Status of Workgroup Bridges
7-37 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Cisco Workgroup Bridges • These features are not supported for wired clients connected to a WGB: – MAC filtering – Link tests – Idle timeout • To enable the WGB to communicate with the ...
Page 40 - Using the CLI to View the Status of Workgroup Bridges; Using the CLI to Debug WGB Issues
7-40 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Cisco Workgroup Bridges Using the CLI to View the Status of Workgroup Bridges Follow these steps to view the status of WGBs on your network using the controller CLI. Step 1 To see any W...
Page 41 - Configuring Backup Controllers
7-41 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Backup Controllers Configuring Backup Controllers A single controller at a centralized location can act as a backup for access points when they lose connectivity with the pr...
Page 42 - Using the GUI to Configure Backup Controllers
7-42 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Backup Controllers Using the GUI to Configure Backup Controllers Using the controller GUI, follow these steps to configure primary, secondary, and tertiary controllers for a...
Page 44 - Using the CLI to Configure Backup Controllers
7-44 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Backup Controllers f. If desired, enter the name and IP address of the tertiary backup controller for this access point in the Tertiary Controller fields. g. Click Apply to ...
Page 46 - Configuring Failover Priority for Access Points; Using the GUI to Configure Failover Priority for Access Points
7-46 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Failover Priority for Access Points Information similar to the following appears for the show advanced timers command: Authentication Response Timeout (seconds)........ 10 R...
Page 48 - Using the CLI to Configure Failover Priority for Access Points
7-48 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Failover Priority for Access Points Step 9 Click Apply to commit your changes. Step 10 Click Save Configuration to save your changes. Using the CLI to Configure Failover Pri...
Page 49 - Configuring Country Codes; Guidelines for Configuring Multiple Country Codes
7-49 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Country Codes • To see the failover priority for each access point, enter this command: show ap summary Information similar to the following appears: Number of APs.............
Page 50 - Using the GUI to Configure Country Codes
7-50 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Country Codes Note If an access point was already set to a higher legal power level or is configured manually, the power level is limited only by the particular country to w...
Page 52 - Using the CLI to Configure Country Codes
7-52 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Country Codes Using the CLI to Configure Country Codes Follow these steps to configure country codes using the CLI. Step 1 To see a list of all available country codes, ente...
Page 56 - Guidelines for Migration; Migrating Access Points to the -U Regulatory Domain
7-56 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Migrating Access Points from the -J Regulatory Domain to the -U Regulatory Domain Guidelines for Migration Follow these guidelines before migrating your access points to the -U regulato...
Page 58 - Using the W56 Band in Japan
7-58 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Using the W56 Band in Japan Using the W56 Band in Japan The Japanese government is formally permitting wireless LAN use of the frequencies in the W56 band for 802.11a radios. The W56 ba...
Page 59 - Optimizing RFID Tracking on Access Points; Using the GUI to Optimize RFID Tracking on Access Points
7-59 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Optimizing RFID Tracking on Access Points Note The Rogue Location Detection Protocol (RLDP) and rogue containment are not supported on the channels listed in Table 7-2 . Note The maximu...
Page 61 - Using the CLI to Optimize RFID Tracking on Access Points
7-61 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Optimizing RFID Tracking on Access Points Step 12 Click Apply to commit your changes. Step 13 Click Save Configuration to save your changes. Step 14 To re-enable the access point radio,...
Page 62 - Configuring Probe Request Forwarding
7-62 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Probe Request Forwarding Step 9 To see a summary of all access points in monitor mode, enter this command: show ap monitor-mode summary Information similar to the following ...
Page 64 - Performing a Link Test
7-64 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Performing a Link Test Step 4 Click the Inventory tab to open the All APs > Details for (Inventory) page (see Figure 7-22 ). Figure 7-22 All APs > Details for (Inventory) Page Thi...
Page 65 - Using the GUI to Perform a Link Test
7-65 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Performing a Link Test response packet. Both the link-test requestor and responder roles are implemented on the access point and controller. Therefore, not only can the access point or ...
Page 67 - Using the CLI to Perform a Link Test; Configuring Link Latency
7-67 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Link Latency Using the CLI to Perform a Link Test Use these commands to run a link test using the CLI. 1. To run a link test, enter this command: linktest ap_mac When CCX v4...
Page 68 - Using the GUI to Configure Link Latency
7-68 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Link Latency Note Link latency calculates the CAPWAP response time between the access point and the controller. It does not measure network latency or ping responses. The co...
Page 69 - Using the CLI to Configure Link Latency
7-69 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Link Latency Step 8 When the All APs > Details for page reappears, click the Advanced tab again. The link latency results appear below the Enable Link Latency check box: ...
Page 70 - Configuring Power over Ethernet
7-70 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Power over Ethernet Step 3 To clear the current, minimum, and maximum link latency statistics on the controller for a specific access point, enter this command: config ap li...
Page 71 - Using the GUI to Configure Power over Ethernet
7-71 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Power over Ethernet Table 7-3 shows the maximum transmit power settings for 1250 series access points using PoE. Note When powered with a non-Cisco standard PoE switch, the ...
Page 73 - Using the CLI to Configure Power over Ethernet
7-73 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Power over Ethernet • Override —This option allows the access point to operate in high-power mode without first verifying a matching MAC address. It is acceptable to use thi...
Page 74 - Configuring Flashing LEDs; Viewing Clients; Using the GUI to View Clients
7-74 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Configuring Flashing LEDs The Power Type/Mode field shows “degraded mode” if the access point is not operating at full power. • To view the controller’s trap log, enter this command: sh...
Page 78 - Using the CLI to View Clients
7-78 Cisco Wireless LAN Controller Configuration Guide OL-17037-01 Chapter 7 Controlling Lightweight Access Points Viewing Clients This page shows the following information: • The general properties of the client • The security settings of the client • The QoS properties of the client • Client stati...
