Cisco Systems OL-17037-01 manual Autonomous Access Points Converted to Lightweight Mode

Page 16

Chapter 7 Controlling Lightweight Access Points

Autonomous Access Points Converted to Lightweight Mode

Autonomous Access Points Converted to Lightweight Mode

You can use an upgrade conversion tool to convert autonomous Cisco Aironet 1100, 1130AG, 1200, 1240AG, and 1300 Series Access Points to lightweight mode. When you upgrade one of these access points to lightweight mode, the access point communicates with a controller and receives a configuration and software image from the controller.

Refer to the Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode document for instructions on upgrading an autonomous access point to lightweight mode. You can find this document at this URL:

http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc

.html

Guidelines for Using Access Points Converted to Lightweight Mode

Keep these guidelines in mind when you use autonomous access points that have been converted to lightweight mode:

Converted access points support 2006, 4400, and WiSM controllers only. When you convert an autonomous access point to lightweight mode, the access point can communicate with Cisco 2006 series controllers, 4400 series controllers, or the controllers on a Cisco WiSM only.

Access points converted to lightweight mode do not support Wireless Domain Services (WDS). Converted access points communicate only with Cisco wireless LAN controllers and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point associates to it.

In controller software release 4.2 or later, all Cisco lightweight access points support 16 BSSIDs per radio and a total of 16 wireless LANs per access point. In previous releases, they supported only 8 BSSIDs per radio and a total of 8 wireless LANs per access point. When a converted access point associates to a controller, only wireless LANs with IDs 1 through 16 are pushed to the access point.

Access points converted to lightweight mode must get an IP address and discover the controller using DHCP, DNS, or IP subnet broadcast.

After you convert an access point to lightweight mode, the console port provides read-only access to the unit.

The 1130AG and 1240AG access points support hybrid-REAP mode. See Chapter 13 for details.

The upgrade conversion tool adds the self-signed certificate (SSC) key-hash to only one of the controllers on the Cisco WiSM. After the conversion has been completed, add the SSC key-hash to the second controller on the Cisco WiSM by copying the SSC key-hash from the first controller to the second controller. To copy the SSC key-hash, open the AP Policies page of the controller GUI (Security > AAA > AP Policies) and copy the SSC key-hash from the SHA1 Key Hash column under AP Authorization List (see Figure 7-6). Then, using the second controller’s GUI, open the same page and paste the key-hash into the SHA1 Key Hash field under Add AP to Authorization List. If you have more than one Cisco WiSM, use WCS to push the SSC key-hash to all the other controllers.

 

Cisco Wireless LAN Controller Configuration Guide

7-16

OL-17037-01

Image 16
Contents Controlling Lightweight Access Points Guidelines for Using Capwap Access Point Communication ProtocolsController Discovery Process Page Config network master-base enable Verifying that Access Points Join the ControllerConfig network master-base disable Viewing Capwap MTU Information Configuring Global Credentials for Access PointsDebugging Capwap Global Configuration All APs Details for Credentials Show ap config general CiscoAP Save configShow ap summary Configuring Authentication for Access Points Lwapp ap dot1x username username password passwordUsing the GUI to Configure Authentication for Access Points ControllerCisco Wireless LAN Controller Configuration Guide Using the CLI to Configure Authentication for Access Points Config ap dot1xuser add username user password password allConfig ap dot1xuser disable all CiscoAP AP Dot1x User Mode field shows CustomizedEmbedded Access Points Configuring the Switch for AuthenticationDns-server ipaddress Default-router ipaddress Ip dhcp pool poolnameAutonomous Access Points Converted to Lightweight Mode Reverting from Lightweight Mode to Autonomous Mode Using a Controller to Return to a Previous ReleaseAuthorizing Access Points Using SSCs Authorizing Access PointsAuthorizing Access Points Using MICs Authorizing Access Points Using LSCs Using the GUI to Configure LSCConfig certificate lsc enable disable Config certificate lsc ca-server http//urlport/pathConfig certificate lsc ca-cert add delete Config certificate lsc other-params keysizeConfig certificate lsc ap-provision revert-cert retries Config certificate lsc ap-provision auth-list add APmacaddrShow certificate lsc summary Using the GUI to Authorize Access Points Show certificate lsc ap-provisionUsing the CLI to Authorize Access Points Config auth-list ap-policy mic ssc lsc enable disableConfig auth-list add mic ssc lsc apmac apkey Show auth-listUsing Dhcp Option 43 and Dhcp Option Troubleshooting the Access Point Join ProcessControlling Lightweight Access Points Configuring the Syslog Server for Access Points Viewing Access Point Join InformationShow ap config global Show ap join stats summary allJoined Converted Access Points Send Radio Core Dumps to Controller Debug ap enable disable command cmd CiscoAPUsing the GUI to Upload Radio Core Dumps Using the CLI to Retrieve Radio Core DumpsShow ap crash-file Using the CLI to Upload Radio Core Dumps Transfer upload startUploading Memory Core Dumps from Converted Access Points Using the GUI to Upload Access Point Core DumpsDisplay of MAC Addresses for Converted Access Points Using the CLI to Upload Access Point Core DumpsSupporting Oversized Access Point Images Config ap reset-button enable disable ap-nameallCisco Workgroup Bridges WGB ExampleGuidelines for Using WGBs Configure terminal Using the GUI to View the Status of Workgroup Bridges Sample WGB ConfigurationShow dot11 association 11 Clients Detail 12 WGB Wired Clients Using the CLI to View the Status of Workgroup Bridges Using the CLI to Debug WGB IssuesDebug dhcp message enable Debug dhcp packet enable Debug dot11 mobile enable Debug dot11 state enableConfiguring Backup Controllers Using the GUI to Configure Backup Controllers 14 Global Configuration15 All APs Details for High Availability Using the CLI to Configure Backup Controllers Config advanced timers ap-discovery-timeout interval Config advanced timers auth-timeout intervalConfiguring Failover Priority for Access Points 130016 Global Configuration Using the CLI to View Failover Priority Settings EnabledConfiguring Country Codes Guidelines for Configuring Multiple Country CodesUsing the GUI to Configure Country Codes 19 All APs Details for Advanced Show country supported Using the CLI to Configure Country CodesShow country Show country channels Config 802.11a enable network config 802.11b enable network Controlling Lightweight Access Points Migrating Access Points to the -U Regulatory Domain Config country J3Guidelines for Migration Show ap migrateConfig ap migrate j52w52 all apname Using the W56 Band in Japan Dynamic Frequency SelectionOptimizing Rfid Tracking on Access Points Using the GUI to Optimize Rfid Tracking on Access Points20 802.11b/g/n Cisco APs Configure Config ap monitor-mode tracking-opt CiscoAP Using the CLI to Optimize Rfid Tracking on Access PointsConfig 802.11b enable CiscoAP Configuring Probe Request Forwarding Config advanced probe filter enable disableConfig advanced probe limit numprobes interval Show ap monitor-mode summaryInventory Performing a Link Test 22 All APs Details for InventoryUsing the GUI to Perform a Link Test Link Test Configuring Link Latency Using the CLI to Perform a Link TestUsing the GUI to Configure Link Latency 25 All APs Details for AdvancedUsing the CLI to Configure Link Latency Config ap link-latency enable disable CiscoAP allConfiguring Power over Ethernet Config ap link-latency reset CiscoAPUsing the GUI to Configure Power over Ethernet EPoE Power EPoE Mode 15.4 W Optimized 20 WCisco Wireless LAN Controller Configuration Guide Config ap power injector enable CiscoAP all installed Using the CLI to Configure Power over EthernetConfig ap power injector enable CiscoAP all override Configuring Flashing LEDs Using the GUI to View ClientsDebug ap command led flash seconds CiscoAP Viewing ClientsControlling Lightweight Access Points Viewing Clients 28 Search Clients 29 Clients Detail Using the CLI to View Clients AP MACS69 OL-17037-01