Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems OL-17037-01 manual Using the GUI to Configure Authentication for Access Points, 7-10

Models: OL-17037-01

1 80

Download 80 pages 30.82 Kb

Page 10

Using the GUI to Configure Authentication for Access Points

Chapter 7 Controlling Lightweight Access Points

Configuring Authentication for Access Points

Note If you choose to follow this suggested flow and enable 802.1X authentication on the switch port after the access point has joined the controller and received the configured 802.1X credentials, you do not need to enter this command.

Note This command is available only for access points that are running the 5.1 or 5.2 recovery image.

c.Connect the access point to the switch port.

2.Install the 5.1 or 5.2 image on the controller and reboot the controller.

3.Allow all access points to join the controller.

4.Configure authentication on the controller. See the “Using the GUI to Configure Authentication for Access Points” section on page 7-10or the “Using the CLI to Configure Authentication for Access Points” section on page 7-12for information on configuring authentication on the controller.

5.Configure the switch to allow authentication. See the “Configuring the Switch for Authentication” section on page 7-14for information on configuring the switch for authentication.

Using the GUI to Configure Authentication for Access Points

Using the controller GUI, follow these steps to configure authentication for access points that join the controller.

Step 1 Click Wireless > Access Points > Global Configuration to open the Global Configuration page (see Figure 7-3).

Figure 7-3 Global Configuration Page

			Step 2	Under 802.1x Supplicant Credentials, check the 802.1x Authentication check box.
			Step 3	In the Username field, enter the username that is to be inherited by all access points that join the
				controller.
			Cisco Wireless LAN Controller Configuration Guide
			Cisco Wireless LAN Controller Configuration Guide

	7-10			OL-17037-01
	7-10			OL-17037-01

Image 10

Cisco Systems OL-17037-01 Using the GUI to Configure Authentication for Access Points, 7-10, 3 Global Configuration Page

Contents

Configuring Authentication for Access Points, page Access Point Communication Protocols, pageConfiguring Global Credentials for Access Points, page Embedded Access Points, pageGuidelines for Using CAPWAP Access Point Communication ProtocolsThe Controller Discovery Process with one discovery type CAPWAP or LWAPP exceeds the maximum discovery count and the access point does not receive a discovery response, the discovery type changes to the other type. For example, if the access point does not discover the controller in LWAPP, it starts the discovery process in CAPWAP Using the CLI to Verify that Access Points Join the Controller Verifying that Access Points Join the ControllerUsing the GUI to Verify that Access Points Join the Controller config network master-base enableViewing CAPWAP MTU Information Configuring Global Credentials for Access PointsDebugging CAPWAP Using the GUI to Configure Global Credentials for Access Points Figure 7-1 Global Configuration PageStep 6 Click Save Configuration to save your changes show ap config general CiscoAP Using the CLI to Configure Global Credentials for Access Pointssave config show ap summaryConfiguring Authentication for Access Points lwapp ap dot1x username username password password7-10 Using the GUI to Configure Authentication for Access PointsFigure 7-3 Global Configuration Page Cisco Wireless LAN Controller Configuration Guide 7-11Figure 7-4 All APs Details for Credentials Page config ap dot1xuser add username user password password CiscoAP Using the CLI to Configure Authentication for Access Pointsconfig ap dot1xuser add username user password password all 7-12show ap config general CiscoAP config ap dot1xuser disable all CiscoAP7-13 show ap summarySwitch# configure terminal Switchconfig# dot1x system-auth-control Embedded Access PointsConfiguring the Switch for Authentication Switchconfig# aaa authentication dot1x default group radiusnetwork ipaddress subnetmask dns-server ipaddress default-router ipaddressip dhcp pool poolname option 43 hex controlleripaddressinhex7-16 Guidelines for Using Access Points Converted to Lightweight Modehtml Autonomous Access Points Converted to Lightweight ModeUsing a Controller to Return to a Previous Release Reverting from Lightweight Mode to Autonomous Mode7-17 Authorizing Access Points Using MICs Authorizing Access PointsAuthorizing Access Points Using SSCs 7-18Using the GUI to Configure LSC Authorizing Access Points Using LSCs7-19 config certificate lsc ca-server http//urlport/path Using the CLI to Configure LSCconfig certificate lsc enable disable config certificate lsc ca-cert add deleteshow certificate lsc summary config certificate lsc ap-provision auth-list add APmacaddrconfig certificate lsc ap-provision revert-cert retries 7-21show certificate lsc ap-provision Using the GUI to Authorize Access Points7-22 config auth-list add mic ssc lsc apmac apkey Using the CLI to Authorize Access Pointsconfig auth-list ap-policy mic ssc lsc enable disable show auth-listAccess Point Using DHCP Option 43 and DHCP OptionTroubleshooting the Access Point Join Process VCI String7-25 You can view join-related information for the following numbers of access pointsshow ap config global Configuring the Syslog Server for Access PointsViewing Access Point Join Information show ap join stats summary allChapter 7 Controlling Lightweight Access Points 7-27where apmac is the MAC address of the 802.11 radio interface Information similar to the following appearsdebug ap enable disable command cmd CiscoAP Converted Access Points Send Crash Information to ControllerConverted Access Points Send Radio Core Dumps to Controller 7-28show ap crash-file Using the CLI to Retrieve Radio Core DumpsUsing the GUI to Upload Radio Core Dumps 7-29transfer upload mode tftp ftp Using the CLI to Upload Radio Core Dumpstransfer upload username username transfer upload password password transfer upload datatype radio-core-dumpUsing the GUI to Upload Access Point Core Dumps Uploading Memory Core Dumps from Converted Access Points7-31 7-32 Display of MAC Addresses for Converted Access PointsUsing the CLI to Upload Access Point Core Dumps save configconfig ap static-ip enable ap-name ip-address mask gateway Supporting Oversized Access Point Imagesconfig ap reset-button enable disable ap-name all 7-33Cisco Workgroup Bridges 7-34Guidelines for Using WGBs 7-35bridge bridge-group-number aging-time seconds 7-36configure terminal exit endshow dot11 association Sample WGB ConfigurationUsing the GUI to View the Status of Workgroup Bridges 7-37Figure 7-11 Clients Detail Page 7-38Clients Page Figure 7-12 WGB Wired Clients Page 7-39Figure 7-13 Clients Detail Page debug dhcp message enable debug dhcp packet enable Using the CLI to View the Status of Workgroup BridgesUsing the CLI to Debug WGB Issues debug dot11 mobile enable debug dot11 state enableConfiguring Backup Controllers 7-417-42 Using the GUI to Configure Backup ControllersFigure 7-14 Global Configuration Page 7-43 Figure 7-15 All APs Details for High Availability Pageconfig ap secondary-base controllername CiscoAP controlleripaddress Using the CLI to Configure Backup Controllersconfig ap primary-base controllername CiscoAP controlleripaddress config ap tertiary-base controllername CiscoAP controlleripaddressshow ap config general CiscoAP show advanced backup-controller config advanced timers ap-discovery-timeout intervalconfig advanced timers auth-timeout interval show advanced timersUsing the GUI to Configure Failover Priority for Access Points Configuring Failover Priority for Access Points7-46 7-47 Step 3 Click Apply to commit your changes7-48 Using the CLI to Configure Failover Priority for Access PointsUsing the CLI to View Failover Priority Settings save configGuidelines for Configuring Multiple Country Codes Configuring Country Codes7-49 d. Click Wireless 802.11b/g/n Network Using the GUI to Configure Country Codesa. Click Wireless 802.11a/n Network b. Uncheck the 802.11a Network Status check box7-51 Figure 7-19 All APs Details for Advanced Pageconfig country code1,code2,code3 Using the CLI to Configure Country Codesconfig 802.11a disable network config 802.11b disable network show country supportedChapter 7 Controlling Lightweight Access Points show country channels7-53 Configuring Country Codesconfig 802.11a enable network config 802.11b enable network config 802.11a enable network config 802.11b enable network7-54 save config7-55 J52 = 34 5170 MHz, 38 5190 MHz, 42 5210 MHz, 46 5230 MHzGuidelines for Migration Migrating Access Points to the -U Regulatory Domainconfig country J3 show ap migrateconfig 802.11a enable network config 802.11b enable network config ap migrate j52w52 all apname7-57 show ap migrateDynamic Frequency Selection Using the W56 Band in JapanMaximum Power for ChannelUsing the GUI to Optimize RFID Tracking on Access Points Optimizing RFID Tracking on Access Points7-59 7-60 Figure 7-20 802.11b/g/n Cisco APs Configure Pageconfig 802.11b enable CiscoAP Using the CLI to Optimize RFID Tracking on Access Pointsconfig ap monitor-mode tracking-opt CiscoAP 7-61config advanced probe limit numprobes interval Configuring Probe Request Forwardingconfig advanced probe filter enable disable show ap monitor-mode summary7-63 The orderable product identifier PIDPerforming a Link Test 7-64Using the GUI to Perform a Link Test 7-657-66 This page shows the results of the CCX link testconfig linktest frame-size sizeoflink-testframes Configuring Link LatencyUsing the CLI to Perform a Link Test config linktest num-of-frame numberoflink-testrequestframespertest7-68 Using the GUI to Configure Link LatencyFigure 7-25 All APs Details for Advanced Page config ap link-latency enable disable CiscoAP all Using the CLI to Configure Link Latency7-69 7-70 Configuring Power over Ethernetconfig ap link-latency reset CiscoAP show ap config general CiscoAPUsing the GUI to Configure Power over Ethernet 7-717-72 Step 3 Perform one of the followingconfig ap power injector enable CiscoAP all override Using the CLI to Configure Power over Ethernetconfig ap power injector enable CiscoAP all installed config ap power injector enable CiscoAP all switchportmacaddressdebug ap command “led flash seconds” CiscoAP Configuring Flashing LEDsUsing the GUI to View Clients Viewing Clients7-75 The MAC address of the clientRadio Type-Choose 802.11a, 802.11b, 802.11g, 802.11n, or Mobile 7-76Cisco Wireless LAN Controller Configuration Guide 7-77Chapter 7 Controlling Lightweight Access Points Viewing Clients Figure 7-29 Clients Detail PageUsing the CLI to View Clients 7-78Disabled 7-79Chapter 7 Controlling Lightweight Access Points Viewing Clients Cisco Wireless LAN Controller Configuration GuideCisco Wireless LAN Controller Configuration Guide 7-80Chapter 7 Controlling Lightweight Access Points Viewing Clients OL-17037-01