Cisco Systems OL-17037-01 manual config certificate lsc ap-provision auth-list add APmacaddr, 7-21

Chapter 7 Controlling Lightweight Access Points

Autonomous Access Points Converted to Lightweight Mode

Step 6 To add access points to the provision list, enter this command:

config certificate lsc ap-provision auth-list add AP_mac_addr

Note To remove access points from the provision list, enter this command: config certificate lsc ap-provisionauth-list delete AP_mac_addr.

Note If you configure an access point provision list, only the access points in the provision list are provisioned when you enable AP provisioning (in Step 8). If you do not configure an access point provision list, all access points with a MIC or SSC certificate that join the controller are LSC provisioned.

Step 7 To configure the number of times that the access point attempts to join the controller using an LSC before the access point reverts to the default certificate (MIC or SSC), enter this command:

config certificate lsc ap-provision revert-cert retries

where retries is a value from 0 to 255, and the default value is 3.

If you set the number of retries to a non-zero value and the access point fails to join the controller using an LSC after the configured number of retries, the access point reverts to the default certificate.

If you set the number of retries to 0 and the access point fails to join the controller using an LSC, the access point does not attempt to join the controller using the default certificate.

Note If you are configuring LSC for the first time, Cisco recommends that you configure a non-zero value.

Step 8 To provision the LSC on the access point, enter this command: config certificate lsc ap-provision{enable disable}

Step 9 To view the LSC summary, enter this command:

show certificate lsc summary
Information similar to the following appears:
LSC Enabled	Yes
LSC CA-Server	http://10.0.0.1:8080/caserver
LSC AP-Provisioning	Yes
Provision-List	Not Configured
LSC Revert Count in AP reboots	3
LSC Params:
Country	4
State	ca
City	ss
Orgn	org
Dept	dep
Email	dep@co.com
KeySize	390
LSC Certs:
CA Cert	Not Configured
RA Cert	Not Configured
	Cisco Wireless LAN Controller Configuration Guide
OL-17037-01	7-21