Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems OL-6217-01 manual Configuring ACU to use CCKM, Click Profile Management

Models: OL-6217-01

1 38

Download 38 pages 11.63 Kb

Page 33

Configuring ACU to use CCKM

Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

Implementing the Cisco SWAN Framework

The VLAN number corresponds to the VLAN number configured in Step 3.

Step 6 Set the authentication:

infra-ap(config-if-ssid)#authentication network-eap <eap-group>

Set the authentication key management:

infra-ap(config-if-ssid)#authentication key-management {[wpa] [cckm]} [optional]

Use the wpa keyword only if you are using WPA. If this is the case, the wpa keyword must preceed the cckm keyword. The optional keyword tells the access point to allow legacy clients that do not support CCKM onto the network. Without the optional keyword, only client devices that support CCKM are allowed onto the network.

The CiscoWorks WLSE template configuration tool is used to perform these tasks in bulk.

Configuring ACU to use CCKM

The steps for configuring CCKM on the WLAN client device is dependent on vendor implementation. This document covers the steps for Cisco Aironet client adapters using the Cisco Aironet Client Utility (ACU). The ACU is used to configure Cisco Aironet 350 series client adapters. Newer Cisco client adapters like the CB21A and CB21AG may use the Cisco Aironet Desktop Utility (ADU) instead of the ACU. No configuration is required to use CCKM with the WLAN client when using the ADU. To configure the ACU to use CCKM, follow these steps:

Step 1 Open the ACU.

Step 2 Click Profile Management.

Step 3 Either create a new profile or select an existing profile to edit, assuming the existing profile implements a supporting 802.1X or EAP authentication type.

Step 4 After configuring the SSID(s) and any parameters in the RF Network or Advanced (Infrastructure) tabs, select Network Security.

Step 5 Configure the EAP authentication parameters.

Step 6 Check the Allow Fast Roaming (CCKM) check box (see Figure 12).

Figure 12 Configuring the ACU for CCKM

	Step 7	Click OK to save the profile.
	Step 8	Return to the main ACU window and click Select Profile.
		Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

	OL-6217-01			33
	OL-6217-01			33

Image 33

Contents

Cisco Structured Wireless-Aware Network SWAN Implementation Guide Corporate HeadquartersJanuary Cisco Systems, Inc 170 West Tasman Drive San Jose, CATurn the television or radio antenna until the interference stops Cisco Aironet 1400 Series Wireless Bridge Deployment GuideManaging the Access Points with the CiscoWorks WLSE Validating the SetupValidating the Configuration C O N T E N T S78-xxxxx-xx Contents Book TitleCisco Structured Wireless-Aware Network SWAN Implementation Guide AudienceAcroymns and Terms TermDefinition Cisco SWAN Framework Overview TermDefinition Figure 1 Cisco SWAN Layers Figure 2 Cisco SWAN Logical View Figure 3 shows the access point-based WDS solution CISCO SWAN Framework Components Software Components Infrastructure Access PointsHardware Components WLCCPCisco Wireless LAN Solution Engine CiscoWorks WLSE Implementing the Cisco SWAN FrameworkWLAN Client Devices Common Tasks Define each WDS-host as a network access server NAS Figure 6 CiscoSecure ACS NAS Setup Adding Username and Password CredentialsFigure 8 CiscoSecure ACS User Setup Figure 7 CiscoSecure ACS User SetupPreparing the CiscoWorks WLSE for Managing WLAN Devices Configuring the AAA Server to Support WLAN Client AuthenticationStep 1 Log into the CiscoWorks WLSE Configuring the CiscoWorks WLSE advanced discovery options Configuring the WDS Access Point Access Point-Based WDS Solution ConfigurationConfiguring Advanced Discovery Options Using Automatic ConfigurationThese are the basic configuration tasks Configuring the Infrastructure Access Point infra-apconfig#hostname hostname Managing the Access Points with the CiscoWorks WLSEinfra-apconfig# username username password password infra-apconfig# ip domain-name ip domain-nameSwitch-Based WDS Solution Configuration Validating the ConfigurationConfiguring the Catalyst 6500 Supervisor Configuring the WDS on the WLSM Define AAA parameters for WLAN client authentication Configuring the Infrastructure Access Points Validating the Setup Managing the WLSM and Access Points with the CiscoWorks WLSEwlsm# show wlccp wds ap wlsm# show wlccp wnm statusmobility ap sup720# show mobility statusFast Secure Roaming with CCKM When Using Multiple Encryption Types or VLANs Step 2 Click Profile Management Configuring ACU to use CCKMCisco SWAN Radio Management Features Preparing to Use Cisco SWAN Radio Management Cisco SWAN Radio Management Features enabled, the WDS periodically requests radio measurement data from supporting registered MNs. These MNs collect the requested data and send it to the WDS. The WDS aggregates data from the MNs and passes the aggregated data to the CiscoWorks WLSE. WLAN client monitoring is configured for client serving and non-serving channels Cisco Structured Wireless-Aware Network SWAN Implementation Guide Cisco Structured Wireless-Aware Network SWAN Implementation GuideImplementing the Cisco SWAN Framework OL-6217-01