Cisco Systems OL-17037-01 manual Using the CLI to Authorize Access Points, Show auth-list

Chapter 7 Controlling Lightweight Access Points

Autonomous Access Points Converted to Lightweight Mode

c.From the Certificate Type drop-down box, choose MIC, SSC, or LSC.

d.Click Add. The access point appears in the access point authorization list.

Note To remove an access point from the authorization list, hover your cursor over the blue drop-down arrow for the access point and choose Remove.

Note To search for a specific access point in the authorization list, enter the MAC address of the access point in the Search by MAC field and click Search.

Using the CLI to Authorize Access Points

Using the controller CLI, follow these steps to authorize access points.

Step 1 To configure an access point authorization policy, enter this command:

config auth-list ap-policy {authorize-ap {enable disable} authorize-lsc-ap {enable disable}}

Step 2 To configure an access point to accept manufactured-installed certificates (MICs), self-signed certificates (SSCs), or local significant certificates (LSCs), enter this command:

config auth-list ap-policy {mic ssc lsc {enable disable}}

Step 3 To add an access point to the authorization list, enter this command:

config auth-list add {mic ssc lsc} ap_mac [ap_key]

where ap_key is an optional key hash value equal to 20 bytes or 40 digits.

Note To delete an access point from the authorization list, enter this command: config auth-list delete ap_mac.

Step 4 To view the access point authorization list, enter this command:

show auth-list

Information similar to the following appears:

Authorize		MIC	APs		against			AAA	disabled
Authorize		LSC	APs		against			Auth-List	disabled
Allow APs		with MIC - Manufactured Installed C							enabled
Allow	APs	with		SSC		-	Self-Signed Certificate		enabled
Allow	APs	with		LSC		-	Locally Significant Cert		enabled

Mac Addr	Cert Type	Key Hash
-----------------------	----------	---------------------------------------------
00:12:79:de:65:99	SSC	ca528236137130d37049a5ef3d1983b30ad7e543
00:16:36:91:9a:27	MIC	593f34e7cb151997a28cc7da2a6cac040b329636

	Cisco Wireless LAN Controller Configuration Guide
OL-17037-01		7-23