Cisco Systems OL-6217-01 manual Configuring ACU to use Cckm, Click Profile Management

Page 33

Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

Implementing the Cisco SWAN Framework

The VLAN number corresponds to the VLAN number configured in Step 3.

Step 6 Set the authentication:

infra-ap(config-if-ssid)#authentication network-eap <eap-group>

Set the authentication key management:

infra-ap(config-if-ssid)#authentication key-management {[wpa] [cckm]} [optional]

Use the wpa keyword only if you are using WPA. If this is the case, the wpa keyword must preceed the cckm keyword. The optional keyword tells the access point to allow legacy clients that do not support CCKM onto the network. Without the optional keyword, only client devices that support CCKM are allowed onto the network.

The CiscoWorks WLSE template configuration tool is used to perform these tasks in bulk.

Configuring ACU to use CCKM

The steps for configuring CCKM on the WLAN client device is dependent on vendor implementation. This document covers the steps for Cisco Aironet client adapters using the Cisco Aironet Client Utility (ACU). The ACU is used to configure Cisco Aironet 350 series client adapters. Newer Cisco client adapters like the CB21A and CB21AG may use the Cisco Aironet Desktop Utility (ADU) instead of the ACU. No configuration is required to use CCKM with the WLAN client when using the ADU. To configure the ACU to use CCKM, follow these steps:

Step 1 Open the ACU.

Step 2 Click Profile Management.

Step 3 Either create a new profile or select an existing profile to edit, assuming the existing profile implements a supporting 802.1X or EAP authentication type.

Step 4 After configuring the SSID(s) and any parameters in the RF Network or Advanced (Infrastructure) tabs, select Network Security.

Step 5 Configure the EAP authentication parameters.

Step 6 Check the Allow Fast Roaming (CCKM) check box (see Figure 12).

Figure 12 Configuring the ACU for CCKM

 

Step 7

Click OK to save the profile.

 

Step 8

Return to the main ACU window and click Select Profile.

 

 

Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

 

 

 

 

 

 

 

OL-6217-01

 

 

33

 

 

 

 

 

Page 32 Page 34
Image 33
Page 32 Page 34
Contents Corporate Headquarters Cisco Aironet 1400 Series Wireless Bridge Deployment Guide N T E N T S Contents Book Title Xxxxx-xx Audience Acroymns and Terms Cisco Swan Framework Overview Cisco Swan Layers Cisco Swan Logical View Shows the access point-based WDS solution WDS Wlccp Cisco Swan Framework ComponentsHardware Components Software ComponentsImplementing the Cisco Swan Framework Common Tasks CiscoSecure ACS NAS Setup Adding Username and Password Credentials CiscoSecure ACS User Setup AAA-apconfig-radsrvuser username password password AAA-apconfig#radius-server localCiscoWorks Wlse Snmp Community Entry Screen CiscoWorks Wlse Telnet/SSH Credentials Entry Configuring the WDS Access Point Access Point-Based WDS Solution ConfigurationWds-apconfig#username username password password Wds-apconfig#hostname hostnameConfiguring the Infrastructure Access Point Wds-apconfig#wlccp wds priority priority numberWds-apconfig#wlccp wnm ip address wlse ip address Infra-apconfig#hostname hostname Managing the Access Points with the CiscoWorks WlseInfra-apconfig#username username password password Infra-apconfig-line#access-class access-list numberValidating the Configuration Switch-Based WDS Solution ConfigurationConfiguring the Catalyst 6500 Supervisor Wds-ap#show wlccp wds apCreate the Vlan between the supervisor and Wlsm Configuring the WDS on the WlsmWlsmconfig#hostname hostname Wlsmconfig#snmp-server view iso iso includedConfiguring the Infrastructure Access Points Wlsmconfig# wlccp wnm ip address wlse ip addressInfra-apconfig#wlccp ap wds ip address wlsm ip address Validating the Setup Wlsm# show wlccp wds apWlsm# show wlccp wnm status Mobility ap Sup720# show mobility statusFast Secure Roaming with Cckm Infra-apconfig#interface dot11Radio When Using Multiple Encryption Types or VLANsInfra-apconfig-if#encryption mode ciphers cipher-type Infra-apconfig-if-ssid#authentication network-eap eap-groupClick Profile Management Configuring ACU to use CckmCisco Swan Framework Radio Management Cisco Swan Radio Management FeaturesBuilding Tool Pop-Up Window Preparing to Use Cisco Swan Radio ManagementCisco Swan Radio Management Features Page OL-6217-01
Top Page Image Contents