Controlling Lightweight Access Points | Cisco Systems OL-8335-02

C H A P T E R 7

Controlling Lightweight Access Points

This chapter describes how to connect access points to the controller and manage access point settings. This chapter contains these sections:

•Lightweight Access Point Overview, page 7-2

•Using the DNS for Controller Discovery, page 7-7

•Dynamic Frequency Selection, page 7-8

•Autonomous Access Points Converted to Lightweight Mode, page 7-9

Cisco Wireless LAN Controller Configuration Guide

	OL-8335-02	7-1

Image 137

Cisco Systems OL-8335-02 manual Controlling Lightweight Access Points

Contents

Corporate Headquarters Cisco Wireless LAN Controller Configuration Guide Cisco Wireless LAN Controller Configuration Guide Iii N T E N T S Client Location Enabling Web and Secure Web Modes Configuring Ports Vii Configuring the System for SpectraLink NetLink Telephones Viii QoS-Level5-17 ACL-Name5-17 Interface-Name5-18 VLAN-Tag5-18 Using Dhcp Option 43 Radio Resource Monitoring Prerequisites Xii Series Wireless LAN Controllers B-8 Xiii Preface Purpose AudienceOrganization Xiv Conventions Xvi Obtaining Documentation Related PublicationsCisco.com Xvii Product Documentation DVD Documentation FeedbackOrdering Documentation Xviii Xix Reporting Security Problems in Cisco ProductsCisco Product Security Overview Cisco Technical Support & Documentation Website Submitting a Service RequestObtaining Technical Assistance Xxi Definitions of Service Request SeverityObtaining Additional Publications and Information Xxii Overview Cisco Wireless LAN Solution Overview Single-Controller Deployments Cisco Wlan Solution Components Single-Controller Deployment Multiple-Controller Deployments Operating System Security Operating System Software Cisco Wlan Solution Wired Security Configuration Requirements Cisco Wireless LAN ControllersLayer 2 and Layer 3 Lwapp Operation Operational Requirements Primary, Secondary, and Tertiary Controllers Client RoamingSame-Subnet Layer 2 Roaming Inter-Controller Layer 2 Roaming Special Case Voice Over IP Telephone Roaming Inter-Subnet Layer 3 RoamingClient Location External Dhcp Servers Per-Wireless LAN AssignmentPer-Interface Assignment Security Considerations Cisco Wlan Solution Wireless LANs Cisco Wlan Solution Wired Connections Identity Networking Access Control Lists Enhanced Integration with Cisco Secure ACS File Transfers Pico Cell Functionality Power over Ethernet Wireless LAN Controller Platforms Intrusion Detection Service IDS Cisco 4100 Series Wireless LAN Controllers Cisco 2000 Series Wireless LAN Controllers Cisco 2000 Series Wireless LAN Controller Model Numbers Cisco 4400 Series Wireless LAN Controllers Cisco 4400 Series Wireless LAN Controller Model Numbers Cisco 4100 Series Wireless LAN Controller Model Numbers Startup Wizard Cisco Wireless LAN Controller Failover Protection Cisco Wireless LAN Controller Memory Cisco Wireless LAN Controller Time Zones Cisco Wireless LAN Controller Automatic Time SettingNetwork Connections to Cisco Wireless LAN Controllers Cisco 4100 Series Wireless LAN Controllers Cisco 2000 Series Wireless LAN Controllers 6shows connections to the 4100 series controller Cisco 4400 Series Wireless LAN Controllers Rogue Access Points Web User Interface Rogue Access Point Location, Tagging, and ContainmentWeb User Interface and the CLI Command Line Interface Using the Web-Browser and CLI Interfaces Guidelines for Using the GUI Using the Web-Browser InterfaceConfiguring the GUI for Https Enabling Web and Secure Web Modes Show certificate summary Loading an Externally Generated Https Certificate Web Administration Certificate file webadmincertname.pem Using Online Help Using the CLIDisabling the GUI Logging into the CLI Using a Remote Ethernet Connection Using a Local Serial Connection Navigating the CLI Command ActionLogging Out of the CLI Enter config network mgmt-via-wireless enable Configuring Ports and Interfaces Ports Overview of Ports and Interfaces Distribution System Ports Service Port Management Interface Interfaces Virtual Interface AP-Manager Interface Dynamic Interface Service-Port Interface Ports, Interfaces, and WLANs WLANs Configuring Ports and Interfaces Interfaces Management Interface Virtual Interface Service-Port InterfaceAP-Manager Interface Config interface acl management access-control-list-name Using the CLI to Configure the Management InterfaceUsing the CLI to Configure the AP-Manager Interface Config interface acl ap-manager access-control-list-name Using the CLI to Configure the Virtual Interface Using the CLI to Configure the Service-Port Interface Configuring Dynamic InterfacesUsing the GUI to Configure Dynamic Interfaces Interfaces New Using the CLI to Configure Dynamic Interfaces Ports Configuring Ports Controller Available Data Rates Parameter Description Controller Supported Data Rates Default EnableDefault Auto Configuring Port Mirroring Configuring Spanning Tree Protocol STP State Description Using the GUI to Configure Spanning Tree Protocol Default Default OffSTP Mode Description 10 Controller Spanning Tree Configuration Range Default DisableRange Default Default 2 seconds Using the CLI to Configure Spanning Tree Protocol 11illustrates LAG Enabling Link Aggregation Link Aggregation Guidelines 12 Link Aggregation with Catalyst 6500 Neighbor Switch 13 General Using the GUI to Enable Link Aggregation Configuring Neighbor Devices to Support LAG Using the CLI to Enable Link Aggregation Using Multiple AP-Manager Interfaces Using Link Aggregation 14 Two AP-Manager Interfaces Examples 15 Three AP-Manager Interfaces 16 Four AP-Manager Interfaces 17 Interfaces New Connecting Additional Ports Configuring Controller Settings Before You Start Using the Configuration Wizard Resetting to Default Settings Using the CLI Resetting the Device to Default SettingsResetting to Default Settings Using the GUI Browse to the Commands/Reset to Factory Defaults Running the Configuration Wizard on the CLI Configuring Time and Date Manually Configuring a Country CodeConfiguring NTP Managing the System Time and Date Country Code Bands Allowed Enabling and Disabling 802.11 Bands Configuring Snmp Settings Configuring Administrator Usernames and PasswordsConfiguring Radius Settings Config 802.11a 802.11bg dtpc enable disable Enabling Dynamic Transmit Power ControlEnabling 802.3x Flow Control Enabling System Logging Guidelines for Using Multicast Mode Configuring Multicast ModeUnderstanding Multicast Mode Command Multicast Mode Configuring the Supervisor 720 to Support the WiSMEnabling Multicast Mode General WiSM Guidelines Configuring the SupervisorCommand Purpose Wism service-vlan vlan Switchport mode trunk Channel-group 1 mode onInterface GigabitEthernet9/1-4 Interface GigabitEthernet9/5-8 Service-module wlan-controller 1/0 reset Using the Wireless LAN Controller Network Module OL-8335-02 Configuring Security Solutions Layer 1 Solutions Cisco Wlan Solution SecurityLayer 2 Solutions Security Overview Rogue Access Point Solutions Layer 3 SolutionsRogue Access Point Challenges Tagging and Containing Rogue Access Points Integrated Security Solutions Configuring the System for SpectraLink NetLink Telephones Using the CLI to Enable Long Preambles Using the GUI to Enable Long Preambles Using the GUI to Enable Management over Wireless Using Management over Wireless Using the GUI to Configure Dhcp Configuring DhcpUsing the CLI to Enable Management over Wireless Using the CLI to Configure Dhcp Customizing the Web Authentication Login ScreenConfig wlan disable wlan-id Config wlan enable wlan-id Typical Web-Browser Security Alert Default Web Authentication Operation Typical Web Authentication Login Window Changing the Web Authentication Login Window Title Customizing Web Authentication OperationHiding and Restoring the Cisco Wlan Solution Logo Changing the Web Message Config custom-web webmessage messageChanging the Logo Clear webmessage Downloading the Logo or Graphic Creating a Custom URL Redirect Verifying Web Authentication ChangesConfig custom-web redirecturl url Example of a Customized Web Authentication Login Window Example Sample Customized Web Authentication Login Window Identity Networking Overview Configuring Identity Networking ACL-Name Radius Attributes Used in Identity NetworkingQoS-Level VLAN-Tag Interface-Name Tunnel Attributes OL-8335-02 Configuring WLANs Displaying, Creating, Disabling, and Deleting Wireless LANs Wireless LAN OverviewConfiguring Wireless LANs Assigning a Wireless LAN to a Dhcp Server Activating Wireless LANsConfiguring MAC Filtering for Wireless LANs Enabling MAC Filtering Configuring Layer 2 Security Assigning Wireless LANs to VLANsConfiguring a Timeout for Disabled Clients Dynamic 802.1X Keys and Authorization Dynamic WPA Keys and Encryption WEP Keys Configuring a Wireless LAN for Both Static and Dynamic WEP Configuring Layer 3 SecurityIPSec Authentication IPSec IKE Phase 1 Aggressive and Main Modes IKE AuthenticationIKE Lifetime Timeout IKE Diffie-Hellman Group Web-Based Authentication Configuring Quality of ServiceIPSec Passthrough Local Netuser Config wlan wmm disabled allowed required wlan-id Configuring QoS Enhanced BSS QbssTraffic Type Ieee 802.11e UP Config wlan 7920-support client-cac-limit enable wlan-id Enabling 7920 Support Mode Controlling Lightweight Access Points Cisco 1000 Series Ieee 802.11a/b/g Lightweight Access Points Lightweight Access Point Overview Typical 1030 Lightweight Access Point Configuration Cisco 1030 Remote Edge Lightweight Access Points Cisco 1000 Series Lightweight Access Point Part Numbers Antenna Sectorization Cisco 1000 Series Lightweight Access Point LEDsExternal Antenna Connectors Cisco 1000 Series Lightweight Access Point Connectors Cisco 1000 Series Lightweight Access Point Monitor Mode Using the DNS for Controller DiscoveryCisco 1000 Series Lightweight Access Point Mounting Options Dynamic Frequency Selection Reverting from Lightweight Mode to Autonomous Mode Autonomous Access Points Converted to Lightweight Mode Using a Controller to Return to a Previous Release Access Point VCI String Using Dhcp Option Enabling Memory Core Dumps from Converted Access Points Converted Access Points Send Radio Core Dumps to ControllerDisplay of MAC Addresses for Converted Access Points Config ap get-radio-core-dump slot ap-name Config ap static-ip enable ap-name ip-address mask gateway Config ap reset-button enable disable ap-nameall OL-8335-02 Managing Controller Software Configurations Upgrading Controller Software Transferring Files to and from a Controller Transfer download path absolute-tftp-server-path-to-file Erasing the Controller Configuration Saving ConfigurationsClearing the Controller Configuration Resetting the Controller OL-8335-02 Configuring Radio Resource Management Radio Resource Monitoring Overview of Radio Resource Management Dynamic Channel Assignment Client and Network Load Balancing Dynamic Transmit Power ControlCoverage Hole Detection and Correction RF Group Leader Overview of RF GroupsRRM Benefits RF Group Name Configuring an RF Group General Using the GUI to Configure an RF Group Viewing RF Group Status Using the CLI to Configure RF GroupsUsing the GUI to View RF Group Status Global Parameters Global Parameters Auto RF Auto Using the CLI to View RF Group Status Using the GUI to Enable Rogue Access Point Detection Enabling Rogue Access Point Detection All APs Details AP Authentication Policy Using the CLI to Enable Rogue Access Point Detection Configuring Dynamic RRM RF Group Using the GUI to Configure Dynamic RRMDefault Enabled You click Invoke Channel Update Now Default AutomaticRF Channel Assignment Channel Assignment Method Description Default Disabled Assignment Method Description Tx Power Level AssignmentClick Invoke Power Update Now Default -70 dBm Default 10%Default 80% Default 25% Monitor Intervals Default Noise/Interference/Rogue Monitoring Channels Config 802.11a disable Config 802.11b disable Using the CLI to Configure Dynamic RRM Overriding Dynamic RRM Radios Cisco APs Configure Config 802.11a txPower AP1 Config 802.11a disable Config 802.11b disable Viewing Additional RRM Settings Using the CLI 10-1 Configuring Mobility Groups 10-2 Overview of Mobility Inter-Controller Roaming 10-3 Inter-Subnet Roaming 10-4 10-5 Overview of Mobility Groups Two Mobility Groups 10-6 Determining When to Include Controllers in a Mobility Group Configuring Mobility GroupsPrerequisites 10-7 10-8 Using the GUI to Configure Mobility Groups Mobility Group Member New 10-9 Mobility Group Members Edit All 10-10 10-11 Configuring Auto-Anchor MobilityUsing the CLI to Configure Mobility Groups 10-12 Guidelines for Using Auto-Anchor MobilityUsing the GUI to Configure Auto-Anchor Mobility WLANs 10-13 10-14 Using the CLI to Configure Auto-Anchor Mobility Safety Considerations Translated Safety Warnings Bewaar Deze Instructies Safety Considerations Avvertenza Importanti Istruzioni Sulla Sicurezza Warnung Wichtige Sicherheitshinweise Guarde Estas Instruções Aviso Instruções Importantes DE Segurança Class 1 Laser Product Warning Aviso Produto a laser de classe Ground Conductor Warning Cisco Wireless LAN Controller Configuration Guide Chassis Warning for Rack-Mounting and Servicing Cisco Wireless LAN Controller Configuration Guide Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Cisco Wireless LAN Controller Configuration Guide Page OL-8335-02 Page OL-8335-02 Page Battery Handling Warning for 4400 Series Controllers Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Equipment Installation Warning Cisco Wireless LAN Controller Configuration Guide OL-8335-02 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Cisco Wireless LAN Controller Configuration Guide Cisco Wireless LAN Controller Configuration Guide OL-8335-02 OL-8335-02 Declarations of Conformity and Regulatory Information Model Regulatory Information for 1000 Series Access PointsFCC Certification number Manufacturer Certification number Department of Communications-CanadaCanadian Compliance Statement EMC Declaration of Conformity for RF Exposure 03-5549-6500 All Access Points Access Points with Ieee 802.11a Radios Declaration of Conformity Statements Cisco Wireless LAN Controller Configuration Guide OL-8335-02 OL-8335-02 End User License and Warranty End User License Agreement Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Limited Warranty Appendix C End User License and Warranty Limited Warranty Disclaimer of Warranty Additional Open Source Terms OL-8335-02 System Messages and Access Point LED Patterns System Messages Error Message Description Lradifcurrentchannelchanged Client Reason Code Description Meaning Using Client Reason and Status Codes in Trap LogsClient Reason Codes Client Status Code Description Meaning Client Status Codes LED Conditions Status Using Lightweight Access Point LEDs IN-1 Numerics IN-2 IN-3 DFS Dhcp IN-4 Help Hold Time parameter IN-5 Physical Mode parameter Physical Status parameter IN-6 IN-7 IN-8