12-11
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services
Configuring WDS
Step5 In the Password field, enter a password for the access point, and enter the password again in the Confirm
Password field. This password must match the password that you create for the access point on your
authentication server. When configuring the username and password in this page, the AP uses LEAP to
authenticate through the WDS server.
Step6 (Optional) If you do not want your infrastructure AP to be authenticated through the WDS using LEAP,
but want to use another EAP authentication method (for example EAP-FAST), select another
authentication method profile from the Authentication Methods Profile drop down list. If you have not
defined Authentication Method Profiles yet, click the Define Authentication Method Profiles link,
configure a profile, then return to the Wireless Services AP configuration page to select the profile. See
the Creating and Applying EAP Method Profiles for the 802.1X Supplicant, page11-17 for more details
on how to create a new profile.
Step7 Click Apply.
The access points that you configure to interact with the WDS automatically perform these steps:
•Discover and track the current WDS device and relay WDS advertisements to the wireless LAN.
•Authenticate with the WDS device and establish a secure communication channel to the WDS
device.
•Register associated client devices with the WDS device.
CLI Configuration Example
This example shows the CLI commands that are equivalent to the steps listed in the “Configuring Access
Points to use the WDS Device” section on page 12-10:
AP# configure terminal
AP(config)# wlccp ap username APWestWing password 0 wes7win8
AP(config)# wlccp ap eap profile Myfast
AP(config)# end
In this example, the access point is enabled to interact with the WDS device, and it authenticates to your
authentication server using APWestWing as its username and wes7win8 as its password.
An optional Myfast EAP profile is called to authenticate using another method than LEAP. In this
example, the profile uses EAP-FAST, and is configured as follows:
ap(config)# eap profile myfast
ap(config-eap-profile)# method fast
ap(config-eap-profile)# end
You must configure the same username and password pair when you set up the access point as a client
on your authentication server.
For complete descriptions of the commands used in this example, consult the Cisco IOS Command
Reference for Cisco Aironet Access Points and Bridges.