Controller | Cisco Systems OL-17037-01 manual

Chapter 7 Controlling Lightweight Access Points

Configuring Authentication for Access Points

Note If you choose to follow this suggested flow and enable 802.1X authentication on the switch port after the access point has joined the controller and received the configured 802.1X credentials, you do not need to enter this command.

Note This command is available only for access points that are running the 5.1 or 5.2 recovery image.

c.Connect the access point to the switch port.

2.Install the 5.1 or 5.2 image on the controller and reboot the controller.

3.Allow all access points to join the controller.

4.Configure authentication on the controller. See the “Using the GUI to Configure Authentication for Access Points” section on page 7-10or the “Using the CLI to Configure Authentication for Access Points” section on page 7-12for information on configuring authentication on the controller.

5.Configure the switch to allow authentication. See the “Configuring the Switch for Authentication” section on page 7-14for information on configuring the switch for authentication.

Using the GUI to Configure Authentication for Access Points

Using the controller GUI, follow these steps to configure authentication for access points that join the controller.

Step 1 Click Wireless > Access Points > Global Configuration to open the Global Configuration page (see Figure 7-3).

Figure 7-3 Global Configuration Page

			Step 2	Under 802.1x Supplicant Credentials, check the 802.1x Authentication check box.
			Step 3	In the Username field, enter the username that is to be inherited by all access points that join the
				controller.
			Cisco Wireless LAN Controller Configuration Guide
			Cisco Wireless LAN Controller Configuration Guide

	7-10			OL-17037-01
	7-10			OL-17037-01

Image 10

Cisco Systems OL-17037-01 manual Using the GUI to Configure Authentication for Access Points, Controller

Contents

Controlling Lightweight Access Points Guidelines for Using Capwap Access Point Communication ProtocolsController Discovery Process Page Config network master-base enable Verifying that Access Points Join the ControllerConfig network master-base disable Viewing Capwap MTU Information Configuring Global Credentials for Access PointsDebugging Capwap Global Configuration All APs Details for Credentials Show ap config general CiscoAP Save configShow ap summary Configuring Authentication for Access Points Lwapp ap dot1x username username password password Using the GUI to Configure Authentication for Access Points Controller Cisco Wireless LAN Controller Configuration Guide Using the CLI to Configure Authentication for Access Points Config ap dot1xuser add username user password password all Config ap dot1xuser disable all CiscoAP AP Dot1x User Mode field shows Customized Embedded Access Points Configuring the Switch for Authentication Dns-server ipaddress Default-router ipaddress Ip dhcp pool poolname Autonomous Access Points Converted to Lightweight Mode Reverting from Lightweight Mode to Autonomous Mode Using a Controller to Return to a Previous Release Authorizing Access Points Using SSCs Authorizing Access PointsAuthorizing Access Points Using MICs Authorizing Access Points Using LSCs Using the GUI to Configure LSC Config certificate lsc ca-cert add delete Config certificate lsc enable disableConfig certificate lsc ca-server http//urlport/path Config certificate lsc other-params keysize Config certificate lsc ap-provision revert-cert retries Config certificate lsc ap-provision auth-list add APmacaddrShow certificate lsc summary Using the GUI to Authorize Access Points Show certificate lsc ap-provision Config auth-list add mic ssc lsc apmac apkey Using the CLI to Authorize Access PointsConfig auth-list ap-policy mic ssc lsc enable disable Show auth-list Using Dhcp Option 43 and Dhcp Option Troubleshooting the Access Point Join Process Controlling Lightweight Access Points Show ap config global Configuring the Syslog Server for Access PointsViewing Access Point Join Information Show ap join stats summary all Joined Converted Access Points Send Radio Core Dumps to Controller Debug ap enable disable command cmd CiscoAP Using the GUI to Upload Radio Core Dumps Using the CLI to Retrieve Radio Core DumpsShow ap crash-file Using the CLI to Upload Radio Core Dumps Transfer upload start Uploading Memory Core Dumps from Converted Access Points Using the GUI to Upload Access Point Core Dumps Display of MAC Addresses for Converted Access Points Using the CLI to Upload Access Point Core Dumps Supporting Oversized Access Point Images Config ap reset-button enable disable ap-nameall Cisco Workgroup Bridges WGB Example Guidelines for Using WGBs Configure terminal Using the GUI to View the Status of Workgroup Bridges Sample WGB ConfigurationShow dot11 association 11 Clients Detail 12 WGB Wired Clients Debug dhcp message enable Debug dhcp packet enable Using the CLI to View the Status of Workgroup BridgesUsing the CLI to Debug WGB Issues Debug dot11 mobile enable Debug dot11 state enable Configuring Backup Controllers Using the GUI to Configure Backup Controllers 14 Global Configuration 15 All APs Details for High Availability Using the CLI to Configure Backup Controllers Config advanced timers ap-discovery-timeout interval Config advanced timers auth-timeout interval Configuring Failover Priority for Access Points 1300 16 Global Configuration Using the CLI to View Failover Priority Settings Enabled Configuring Country Codes Guidelines for Configuring Multiple Country Codes Using the GUI to Configure Country Codes 19 All APs Details for Advanced Show country supported Using the CLI to Configure Country CodesShow country Show country channels Config 802.11a enable network config 802.11b enable network Controlling Lightweight Access Points Guidelines for Migration Migrating Access Points to the -U Regulatory DomainConfig country J3 Show ap migrate Config ap migrate j52w52 all apname Using the W56 Band in Japan Dynamic Frequency Selection Optimizing Rfid Tracking on Access Points Using the GUI to Optimize Rfid Tracking on Access Points 20 802.11b/g/n Cisco APs Configure Config ap monitor-mode tracking-opt CiscoAP Using the CLI to Optimize Rfid Tracking on Access PointsConfig 802.11b enable CiscoAP Config advanced probe limit numprobes interval Configuring Probe Request ForwardingConfig advanced probe filter enable disable Show ap monitor-mode summary Inventory Performing a Link Test 22 All APs Details for Inventory Using the GUI to Perform a Link Test Link Test Configuring Link Latency Using the CLI to Perform a Link Test Using the GUI to Configure Link Latency 25 All APs Details for Advanced Using the CLI to Configure Link Latency Config ap link-latency enable disable CiscoAP all Configuring Power over Ethernet Config ap link-latency reset CiscoAP Using the GUI to Configure Power over Ethernet EPoE Power EPoE Mode 15.4 W Optimized 20 W Cisco Wireless LAN Controller Configuration Guide Config ap power injector enable CiscoAP all installed Using the CLI to Configure Power over EthernetConfig ap power injector enable CiscoAP all override Debug ap command led flash seconds CiscoAP Configuring Flashing LEDsUsing the GUI to View Clients Viewing Clients Controlling Lightweight Access Points Viewing Clients 28 Search Clients 29 Clients Detail Using the CLI to View Clients AP MAC S69 OL-17037-01