Cisco Systems 3.2 инструкция обслуживания

Corporate He adquarters Cisc o Syst ems , Inc . 170 West Ta sman Drive San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 526-4100 Cisco Wireless LAN Controller Configuration Guide Softwa re Re le a se 3 .2 Marc h 20 06 Text Pa rt Nu mber: OL-8335- 02[...]

THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI ON, AND RECOMMENDA TIONS IN T HIS MANUAL ARE BELIEVED TO BE ACCURATE BU T ARE PRESEN TED WITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TA KE FULL RESPONSIBILITY FOR THEIR AP PLICATION OF ANY PR[...]

iii Cisco Wi reless LAN C ontrolle r Configur ation Gui de OL-8335-02 CONTENTS Preface xii i Audienc e xiv Pur pose xiv Organi zation xiv Conv enti ons xv Rela ted Publi cation s xvii Obtain ing Docu mentati on xvii Cisco. com xvii Produc t Documentat ion DVD xv iii Orderi ng Documenta tion xviii Document ation F eedback xviii Cisco Pr oduct S ecur[...]

Cont ent s iv Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Clien t Roam ing 1-8 Same-Sub net (La yer 2) Roami ng 1-8 Inter -Contro ller (Laye r 2) Roaming 1-8 Inter -Subnet ( Layer 3) Ro aming 1-9 Specia l Case: Voi ce Over IP Telepho ne Roaming 1-9 Client Locatio n 1-9 Exte rnal D HCP Ser vers 1-10 Per-W ire less L AN Assig nme nt [...]

Content s v Cisco Wi reless LAN Co ntroll er Conf igurati on Guide OL-8335-02 Web User Int erface an d the CLI 1-25 Web U ser Inte rfac e 1-25 Command L ine Interf ace 1-26 CHAPTER 2 Using the Web- Browser and CLI In terfa ces 2-1 Using th e Web-Bro wser In terf ace 2-2 Guidel ines f or Using th e GUI 2-2 Opening the GUI 2-2 Enabli ng Web and Secur[...]

Cont ent s vi Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Using th e CLI to Co nfigur e the Vir tual In terface 3-13 Using th e CLI to Co nfigur e the Ser vice-Po rt Inter face 3-14 Config urin g Dynamic Int erface s 3-14 Using th e GUI to Confi gure Dynami c Interf aces 3-14 Using th e CLI to Co nfigur e Dynamic Int erface s 3-16 [...]

Content s vii Cisco Wi reless LAN Co ntroll er Conf igurati on Guide OL-8335-02 Config urin g Multi cast Mode 4-9 Underst anding Mul ticast Mode 4-9 Guidel ines f or Using M ultica st Mode 4-9 Enabli ng Mul ticast Mode 4-10 Config urin g the Superv isor 720 to Suppor t the WiS M 4-10 Gene ral W iSM G uide lines 4-10 Config urin g the Superv isor 4-[...]

Cont ent s viii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Config urin g Identi ty Networki ng 5-16 Ident ity N etwo rkin g Ov ervi ew 5-16 RADIUS Attri butes Us ed in Identi ty Ne tworkin g 5-17 QoS- Leve l 5-17 ACL-Name 5-17 Interf ace -Nam e 5-18 VLAN-Tag 5-18 Tunnel Attri butes 5-19 CHAPTER 6 Configur ing WLANs 6-1 Wirele ss L[...]

Content s ix Cisco Wi reless LAN Co ntroll er Conf igurati on Guide OL-8335-02 CHAPTER 7 Control ling Light weight Access Poi nts 7-1 Ligh twei ght Acc ess Poi nt Ov ervi ew 7-2 Cisco 10 00 Series I EEE 802 .11a/b/ g Lightw eight Acc ess Point s 7-2 Cisco 10 30 Remote Edge Light weight Access Poi nts 7-3 Cisco 10 00 Series L ightwe ight Acce ss Poi[...]

Cont ent s x Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Erasi ng the Con troll er Config uratio n 8-4 Resett ing th e Control ler 8-5 CHAPTER 9 Configur ing R adio Resou rce Management 9-1 Overvi ew of Radio Res ource Manag ement 9-2 Radio Res ource Moni toring 9-2 Dynamic Ch annel Assi gnment 9-3 Dynamic Tr ansmit Po wer Control [...]

Content s xi Cisco Wi reless LAN Co ntroll er Conf igurati on Guide OL-8335-02 CHAPTER 10 Configur ing Mob ility Gro ups 10 -1 Overvi ew of Mobility 10-2 Overvi ew of Mobility Groups 10-5 Deter minin g When to Includ e Co ntro llers i n a Mobi lity G roup 10-7 Config urin g Mobilit y Groups 10-7 Prereq uisite s 10-7 Using the GUI to Co nfig ure Mob[...]

Cont ent s xii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 FCC State ments f or Cisco 200 0 Series Wir eless LAN Co ntroll ers B-8 FCC State ments f or Cisco 410 0 Series Wir eless LAN Co ntroll ers and Cis co 4400 Seri es Wirele ss LAN Contro ller s B-9 APPENDI X C End User Lice nse and Warra nty C-1 End User Li cense Agr eement C[...]

xiii Cisco Wi reless LAN C ontrolle r Configur ation Gui de OL-8335-02 Preface This prefa ce p rovid es an overvi ew of th e Cisco W ir eless LAN Contr olle r Configur ation Guide (OL-83 35-02) , refere nces relate d public ations, a nd explains how to obtain othe r docu mentati on and techni cal as sistan ce, i f neces sary . It cont ains thes e s[...]

xiv Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Audien ce Audience This guide describes Cisco W ireless LAN Controllers a nd Cisco Ligh tweight Acc ess Points. Thi s guide is for the ne tworking p rofessio nal w ho inst alls and manage s these devices. T o use th is guid e, you sh ould be fami liar w ith th e con cepts and [...]

xv Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Pre face Convent ions Conven tions This pu blica tion use s the se conv enti ons to conve y instru ctions and i nforma tion: Command descri ptions use th ese conventions: • Command s and keywords are in b oldface text. • Arguments fo r which you suppl y values are in italic . ?[...]

xvi Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Conv entio ns Va r o i t u s Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Enne n kuin työskentelet minkään laitteiston parissa, ota se lvää sähkökytkentöihin l iittyvis tä vaaroista ja tavanomaisista onnettomuuksien ehkäis[...]

xvii Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Pre face Relate d Publicati ons Related Publications These document s provide co mplete informati on about the Cisco Unifie d W ireless Network Solution: • Cisco W ire less LAN Contr oller Comman d Reference • Quic k Start G u ide : Cisc o 2000 Se ries W ir ele ss LAN C ontr [...]

xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Docum entation Fe edback Product Docu mentation DVD The Product Docum entat ion DVD is a comp rehensive libra ry of tech nical p roduc t docu ment ation o n a portable mediu m. The D VD enables you to access multiple v ersions of install a tion, conf iguration, and comman d [...]

xix Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Pre face Cisco Pro duct Securit y Overvie w Cisco Product Security Overview Cisco pro vides a free online Security V ulnerability Policy portal a t this URL: http://www .cisco.co m/en/US/produ cts/products_sec urity_vulnerabilit y _policy .html From this site, you will f ind infor[...]

xx Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Obtain ing Techni cal Ass istance Obtaining Tech nical Assistance Cisco T e chnica l Support provides 24-hou r-a-day award-winni ng techni cal assist ance. Th e Cisco T echni cal Suppo rt & D ocumenta tion we bsite on Ci sco.co m featur es extensive online suppor t resou rc[...]

xxi Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Pre face Obtaining Additional Publications and Information T o open a ser vice re quest by telep hone, use one of the fo llowing number s: Asia-Pacific: +61 2 8446 7411 (Austral ia: 1 800 805 227 ) EMEA: +3 2 2 704 55 55 USA: 1 800 553-2 447 For a complete list of Cisco T A C cont[...]

xxii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Preface Obtainin g Addi tional Pub lications and Informat ion • P acket magaz ine is the Ci sco Syst ems tech nical use r magazine for maximi zing Inte rnet an d networkin g in vestments. Each quarte r , Packet delivers coverage of the latest i ndustry trend s, technol ogy breakthr[...]

C HAP TER 1-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 1 Overview This c hapter d escrib es the c ontrol ler comp onents and f eatures. Its c ontains these sections: • Cisco Wireless LAN Soluti on Overview , pa ge 1-2 • Operat ing System Softw are, pa ge 1-5 • Operatin g Syst em Secu rity , pa ge 1- 5 • Layer 2 and L[...]

1-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Cisc o Wirele ss LA N So lution O vervi ew Cisco Wireless LAN Solu tion Overview The Cisco W ireless LAN Solution is designed to provide 802.1 1 wireless networking solutions for enterpri ses and serv ice provider s. The Cisc o W ireless LA N Solution si mplifies [...]

1-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Cisco Wirele ss LAN Solution Overvie w Figur e 1 -1 Cisco WLAN Sol ution Components Single-Controlle r Deployme nts A standa lone con trolle r can support lightwe ight a ccess po ints a cross mu ltiple f loors a nd buildings simultane ously , and suppor ts the [...]

1-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Cisc o Wirele ss LA N So lution O vervi ew Figur e 1-2 Single-Contr oller Deployment Multiple-Controller Deployments Each con troll er can support light weight access points across multiple floor s and buildi ngs simultaneou sly . Howe ver , full functional ity of[...]

1-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Operating System Software Figur e 1 -3 T ypic al Multi-Contr oller Deplo yment Operating Sy stem Software The operating system software cont rols Cisco W irele ss LAN Controllers and Cisco 1000 Series Lightwei ght Acces s Points. It includes full operating syst[...]

1-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Operating System Secur ity • RSN with or without Pre-Shared ke y . • Cranite FI PS140-2 compli ant p assthrough. • Fortress FIPS140-2 compliant passt hrough. • Optional MA C Filtering. The WEP proble m can be furth er solved using industry -standa rd Layer[...]

1-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Layer 2 and La yer 3 LWAPP Operation Layer 2 and Layer 3 LWAPP Operation The L W A PP comm unication s betwee n Cisco W i reless LA N Controlle r and Cisco 100 0 series lightw eight access p oints can be c onducted at ISO Da ta Link Lay er 2 or Net work Lay er [...]

1-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Client Roaming The operator can monito r the m aster cont roller u sing the WCS W eb U ser I nterfac e and wa tch a s acce ss point s associate with t h e mas ter co ntroll er . Th e oper ator can th en ve rify acces s poin t conf iguration and assign a primar y ,[...]

1-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Client Roaming Note that the Ci sco 1030 remote edge li ghtweig ht access points a t a remote lo cation mu st be on the same subnet to suppo rt r oaming . Inter-Subnet (Layer 3) Roaming In mul tiple-c ontroll er dep loyment s, the Cisco Wireless LA N Soluti on [...]

1-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view External DHCP Server s External DHCP Servers The ope rati ng syste m is de signed to appear as a DHCP Relay t o the network and as a D HCP Server to clients with indu stry-standard ex ternal DHCP Serve r s that support DHCP Relay . This means that each Cisco Wire[...]

1-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Cisco WLAN S olution W ired Conn ections Cisco WLAN Soluti on Wired Connections The Ci sco Wireless LAN Sol ution compone nts co mmunic ate wit h eac h other using industr y-stand ard Ethernet cables a nd con nectors. T he foll owing paragraphs c ontain de tai[...]

1-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Access Control Li sts Access Control Lists The operating system allows you to def ine up to 64 Access Control Lists (A CLs), similar to standard fi r e wall Access Control Lists. Each A CL can hav e u p to 64 Rules (filt ers). Operat ors can use A CLs to co ntrol[...]

1-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview File Tr ansfers Enhance d Integratio n with Ci sco Secu re ACS The iden tity-based n etwork ing featu re uses authentica tion, authoriza tion, and accounting (AAA) ov erride. Whe n the follo wing vend or -specif ic attrib utes are prese nt in the RADIUS acces [...]

1-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Power ove r Ethern et Power over Et hernet Light weight access poin ts can rec eiv e power v ia th eir E therne t cab les fr om 802 .3af -comp atible Power over Ethernet (PoE ) devices, whic h can r educe the c ost o f disc rete power su pplies, addi tiona l wiri[...]

1-15 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Intrusi on Detection Ser vice (IDS) • Allows change s to Cisco 1000 serie s lightwe ight acc ess point sensit i vity for pico cells. • Allows contro l of Ci sco 1000 serie s lightw eight a ccess poi nt fallbac k behavior t o optim ize pic o cel l use. • [...]

1-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Wireless LAN Contro ller Pl atforms Cisco 2000 Series Wireless LAN Controllers The Ci sco 20 00 Seri es Wireless LAN Co ntrolle r is pa rt of t he Ci sco Wireless LAN So lutio n. Eac h 2000 series control ler cont rols up to six Cisco 1000 series lightw eight a c[...]

1-17 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Wireless LAN Controller Platforms Cisco 4400 Series Wireless LAN Controllers Cisco 4400 Series W ireless LA N Cont rollers are part of the Cisc o W ireless L AN Solut ion. Each Cisco 4400 Series W irel ess LAN Contro ller co ntrols up to 100 Cisco 1000 serie s[...]

1-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Wireless LAN Contro ller Pl atforms Cisco 4100 S eries Wireless LAN Contro ller Mode l Numbers Cisco 4100 Series W ireless LAN Controller model numbers are as follo ws: • AIR-WLC 4112-K9 — The Ci sco 4100 Series Wireless LAN Contro ller us es two redunda nt G[...]

1-19 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Wireless LAN Controller Platforms The 440 2 Cisco 4400 Ser ies W ireless LA N Contr oller uses one set of two redundant front-p anel SX/LC/T SFP modules (SFP tra nsceiv er, or Small Form -factor Plug-in ), and the 4404 Cisc o 4400 Series W ire less LAN Control[...]

1-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Wireless LAN Contro ller Pl atforms • Enable s and/or disa bles the 802. 11a, 802.1 1b and 802 .11g Cisco 1000 series l ightweig ht access point network s. • Enable s or disables Radio Resour ce Mana gement (RRM ). T o use the Startup W izard, refer to the ?[...]

1-21 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Wireless LAN Controller Platforms • If the acc ess point f inds no mast er controller o n the same sub net, it attempts to contac t stored Mobility Group members by IP address. • Should none of the Mob ility Group mem bers be av ailable, and if the Cisco 1[...]

1-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Wireless LAN Contro ller Pl atforms Cisco 2000 Series Wireless LAN Controllers Cisco 200 0 Series W ir eless LAN Con troll ers can co mmuni cate with t he network through any one of its physical da ta ports, as the l ogical ma nagem ent inte rface can be assig ne[...]

1-23 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Wireless LAN Controller Platforms Figure 1-6 shows connec tions to th e 4100 ser ies control ler . Figur e 1 -6 Ph ysical Netw ork C onnections t o the 41 0 0 Ser ies Controll er Cisco 4400 Series Wireless LAN Controllers Cisco 4 400 Seri es Wireless LAN Contr[...]

1-24 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Rogue Acc ess Points Figur e 1 -7 Phys ical Networ k Connection s t o 4402 and 4404 Ser ies Controllers VPN and Enhance d Secu rity Modu les for 41 00 Serie s Controllers All 4100 se ries co ntrolle rs can be equippe d with an optiona l modul e that sl ides in to[...]

1-25 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 Ov erview Web User I nterfac e and the CLI Rogue Ac cess Point Loca tion, Tagging , and Contai nment This b u ilt-in detecti o n, tagging, mo nitoring, and conta inment capability a llo ws system administrators to take requ ired ac tions : • Locat e rogue acce ss poin[...]

1-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Ch apter 1 Over view Web User Interface and the CLI Because the W eb User Interfa ce works wi th one Cisco W ireless LAN Controller at a time, the W eb User Interf ace is especially useful when you wish to conf igure or monitor a single Cisco W ireless LAN Controller and i ts associ [...]

C HAP TER 2-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 2 Using the Web-Browser a nd CLI Interfaces This chap ter des cribes the web-bro wser and C LI interf aces that you use to conf igur e the controll ers. It contai ns these section s: • Using the W eb-Browser Interface, page 2-2 • Ena bling W eb and S ecur e W eb Mode[...]

2-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the We b-Browser and CLI Interfaces Using the We b-Browser I nterface Using the Web-Browser In terface The web- browser interfac e (her eafte r called the GUI) all ows up to f ive users to browse simu ltaneousl y into the controller http or h ttps (http + SSL) manageme[...]

2-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 2 Using the Web -Brow ser and CLI Interfaces Enablin g Web and Secur e Web Modes Using the CLI, foll ow these steps to enable HT TPS: Step 1 Ente r show certif icate summa ry to veri fy that the controller has generated a certif icate: > show certificate summary Web Adm[...]

2-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the We b-Browser and CLI Interfaces Enablin g Web and Secure Web Mode s Foll ow these steps to load an extern ally generated HTT PS certifi cate: Step 1 Use a p assword to encr ypt the HTTPS cer tific ate in a .PEM -encoded f ile. The PE M-encoded f ile is calle d a W [...]

2-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 2 Using the Web -Brow ser and CLI Interfaces Using the CLI Step 9 Reboot the contr oller: > reset system Are you sure you would like to reset the system? (y/n) y System will now restart! The co ntrolle r reboo ts. Disabling the GUI T o pre vent al l use of the GUI, sele[...]

2-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the We b-Browser and CLI Interfaces Using the CLI Using a Local Serial Co nnection Y ou need th ese items to connect to the serial port: • A com puter t hat has a D B-9 s eria l port an d is ru nning a te rminal em ulation prog ram • A DB- 9 male -to-fe male null- [...]

2-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 2 Using the Web -Brow ser and CLI Interfaces Using the CLI Logging Ou t of the CLI When you finish using the CLI , navigate t o the ro ot level and ente r logout . Th e system promp ts you t o sav e any c hanges you made to the v olatile RAM. Navigatin g the CL I The is or[...]

2-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 2 Using the We b-Browser and CLI Interfaces Enablin g Wireless Con nections to the Web-Brow ser and CL I Interfaces Enabling Wireless Conn ections to the Web-Browser and CLI Interfaces Y ou ca n monito r and con figure control lers usi ng a wirele ss client . This fea ture is [...]

C HAP TER 3-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 3 Configuring Ports and Interfaces This c hapter d escrib es the contro ller’ s physical ports a nd int erface s and pr ovides inst ructio ns for configur ing th em. It con tai ns the se se ction s: • Overview of Ports and Interfa ces, page 3-2 • Configuring the M [...]

3-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Overvi ew of Port s and Inter faces Overview of Ports and Interfa ces Three concepts are k ey to understa n ding how controllers conne ct to a wireless network: por ts, interfaces, and WLANs. Ports A port is a physical entity that is used f[...]

3-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Overview of P orts and Inte rfaces Note Figur e 3-3 shows a Cisco 4404 cont roller . The Cisco 4402 co ntrolle r is similar but has only two distribution system por ts. Ta b l e 3 - 1 provides a list of po rts per contr oller . Distribu[...]

3-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Overvi ew of Port s and Inter faces • The Ci sco WiSM has eig ht g igabit Et hernet distr ibution syst em po rts, whi ch are loca ted o n the Catalyst 6500 swi tch bac kplane. Through thes e port s, the control ler can support up to 300 a[...]

3-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Overview of P orts and Inte rfaces Interfaces An interface is a logical entity on the controller . An interface has multiple para meters associated with it, in cludin g an IP addr ess, d efault-gat eway (for the IP su bnet), prima ry ph[...]

3-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Overvi ew of Port s and Inter faces Note If the se rvice port is in use , the manage ment inter face must be on a differen t sub net fr om the servic e-por t interf ace. AP-Manager Inter face A contr oller ha s one o r mor e AP-manag er int[...]

3-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Overview of P orts and Inte rfaces unused gateway IP address, s uch as 1.1.1 .1. T he virtua l inte rface IP a ddress i s not pi ngable a nd shou ld not exist in any routin g table in yo ur network. In ad ditio n, the vir tual inter fac[...]

3-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Overvi ew of Port s and Inter faces WLANs A WLA N associate s a service se t identifier (SSID) to an interface. It is conf igured with secu rity , quality of servi ce (Q oS), radi o polic ies, an d other wireless n etwork p aramete rs. Up t[...]

3-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Confi guring t he Managem ent, AP-Ma nager, Virtua l, and Ser vice-Por t Interfaces Note A zero v alue for th e VLAN iden tifi er (on the Controlle r > Inter faces page) mean s that t he interf ace is untagged. The de fault ( untagg [...]

3-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing the Manage ment, AP-M anager , Virtual, and Ser vice-Port Interface s Figu re 3-5 Inter f aces Pag e This page shows the curre nt cont roller i nterfac e settings . Step 2 If you w ant to modify t he settings o f a parti cular[...]

3-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Confi guring t he Managem ent, AP-Ma nager, Virtua l, and Ser vice-Por t Interfaces AP-Manag er Interf ace • VLAN identif ier Note Enter 0 for an untagge d VLA N or a non-ze ro value fo r a tagg ed V LAN. Ci sco recom mends that only[...]

3-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing the Manage ment, AP-M anager , Virtual, and Ser vice-Port Interface s Using the CL I to Configure th e Man agement, AP-Ma nager, V irtual, and Service-Port Inter faces This sec tion pr ovides instruc tions fo r displayi ng an [...]

3-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Confi guring t he Managem ent, AP-Ma nager, Virtua l, and Ser vice-Por t Interfaces Step 3 Ente r config wlan disable wlan- number to disab le each WLA N th at us es th e AP -man ager inter face for distribution syste m communi cation [...]

3-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing Dynam ic Interf aces Using the CLI to Configure the Ser vice-Port Interf ace Foll ow these steps to display and confi g ure the service -port interfa ce parameters using the CLI. Step 1 Ente r show interface de tailed ser vice[...]

3-15 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Dynamic Interfaces Figu re 3-6 Inter f aces > New P a ge Step 3 Enter an inter face name and a VLAN identif ier , as sho wn in Figure 3 -6 . Note Enter a no n-ze ro value f or the VLAN iden tifier . T agged VLAN s must b[...]

3-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing Dynam ic Interf aces Step 5 Conf igure the f ollowing p arameters: • VLAN identif ier • Fix ed IP addr ess , IP net mask, and de fault gate wa y • Physical p ort assignme nt • Primary a nd se condary DHC P servers • [...]

3-17 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Ports Step 5 Ente r show inte rface det ailed op erator-defined -inte rface- name a nd s how int erface summa ry to v erify that your ch ange s hav e been sa ved. Note If desire d, you can enter conf ig interface delete ope[...]

3-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Conf iguri ng Po rts Figur e 3-9 P ort > Configur e P age Ta b l e 3 - 2 interprets the cur rent status of the port. Ta b l e 3 - 2 P o r t S t a t u s Parameter Description Po r t N u m be r The number of the current port. Physical Sta[...]

3-19 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Ports Step 3 Ta b l e 3 - 3 lists and describes th e port’ s config urable paramete r s. F o llo w the instructions in the table to make any desire d chan ges. Pow er Over Ether net (PoE) Dete rmines if th e connectin g d[...]

3-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Conf iguri ng Po rts Step 4 Click Sa ve Configuration to save your cha nges. Step 5 Click Back to return t o the Ports page and review your ch anges. Step 6 Repeat th is proced ure for each addit ional p ort that you want to configure. Ste[...]

3-21 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Ports b. Click Deta il for th e ac cess poin t on whic h you want to enab le mir ror mo de. The All AP s > Detai ls page appe ars. c. Under Genera l, set the Mirror Mode parameter to Enable . Step 6 Click Sa ve Configura[...]

3-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Conf iguri ng Po rts Using the GUI to C onfigure Spannin g Tree Protocol Foll ow these steps to config ure STP using the GUI. Step 1 Click Contr oller > Po r t s to access the Port s page (see Figure 3-8 ). Step 2 Click Edit for the spe[...]

3-23 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Ports Step 4 Click Sa ve Configuration to save your cha nges. Step 5 Click Back to return to the Por ts page. Step 6 Repeat Step 2 through Step 5 fo r each port for which you want to e nable S TP . Step 7 Click Contr oller [...]

3-24 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Conf iguri ng Po rts Figur e 3-1 0 Contr oller Spanni ng T r ee Configur ation P age This page allo ws you to enable or disable the spanning tree alg orithm for the controller , modify its charac terist ics, and view the STP st atus. Ta b [...]

3-25 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configuring Ports Step 8 Ta b l e 3 - 7 lists and describes the controller’ s conf igurable STP parameters. Follow the instructions in t h e tabl e to make any desire d changes. Max Age (second s) The maximu m age of STP info rmation[...]

3-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Conf iguri ng Po rts Step 9 Click Sa ve Configuration to save your cha nges. Using the C LI to C onfigure Spanning T ree Protocol Foll ow these steps to configu re STP using the CLI. Step 1 Ente r show spanningtree port an d show spanningt[...]

3-27 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Enabl ing Li nk Aggre gation Step 10 After you configu re STP sett ings for the por ts, ente r config spanningtree switch mode enable to enab le STP for the co ntroll er . The co ntroll er auto matica lly dete cts logica l network l oo[...]

3-28 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Enablin g Link Agg regati on When configuri ng bundled ports, you ma y want to conside r spanning modules with you r port cha nnel when you co nnec t to a modula r switc h such as th e Catalyst 6500. Th is pract ice provides pr otect ion i[...]

3-29 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Enabl ing Li nk Aggre gation LA G is typically conf igured using the Startup W izard, bu t you can enable or disable it at any time through eith er the GUI or CL I. Using the GUI to Enable Lin k Aggreg ation Foll ow these steps to enab[...]

3-30 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing a 4400 Series Control ler to Suppo rt More T han 48 Acc ess Points Using the CLI to Enab le Link Aggr egation Foll ow these steps to enable LA G on your controller using the CLI. Step 1 Ente r config la g enable to en able LA [...]

3-31 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configur ing a 4400 Seri es Controller to S upport Mo re Than 48 Access Points The fo llowing factors should he lp you deci de which me thod to use if your contro ller is set for Layer 3 operati on: • W ith link aggrega tion, all of [...]

3-32 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing a 4400 Series Control ler to Suppo rt More T han 48 Acc ess Points Figu re 3-14 T wo AP-Manager I nterfaces Note Cisc o recom mend s that you configure all AP -mana ger in terfaces on th e same VLAN and I P su bnet. Before imp[...]

3-33 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configur ing a 4400 Seri es Controller to S upport Mo re Than 48 Access Points Figu re 3-15 Thr ee AP -Man ager Inter faces Figure 3-16 illustrates the use of four AP-manag er interfa ces to support 100 access points. Eac h has a un iq[...]

3-34 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing a 4400 Series Control ler to Suppo rt More T han 48 Acc ess Points Figu re 3-16 Four A P -M ana ger I nterfaces This conf iguration has the adv antage of load-balancin g all 10 0 access points ev enly across all fo ur AP-manag[...]

3-35 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 3 Configuring Port s and Interf aces Configur ing a 4400 Seri es Controller to S upport Mo re Than 48 Access Points Figur e 3-1 7 Int erfa ces > New P age Step 3 Enter an AP-manager interf ace name and a VLAN ide ntif ier , as sho wn abov e. Step 4 Click A pply to comm[...]

3-36 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 3 Configur ing Ports and Int erfaces Configur ing a 4400 Series Control ler to Suppo rt More T han 48 Acc ess Points Step 5 Enter the a pprop riat e in terface par amete rs. Step 6 T o mak e the inter face an AP-ma nager inter face, check the Enable Dynamic AP Management chec[...]

C HAP TER 4-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 4 Configuring Controller Settings This c hapter desc ribes ho w to conf igure setti ngs on th e controll ers. This chapte r contains these se ctions: • Using the Con figuration Wizard, page 4- 2 • Managin g the System Time and Date , page 4-5 • Configuring a Count [...]

4-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Using the Configu ration Wizard Using the Configura tion Wizard This section descr ibes how to con figu re basic settings on a controller for the fir st time or after the conf iguration has been reset to fact o ry defau lts. The contents [...]

4-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Using th e Configurati on Wiza rd Resetting the De vice to Default Settings If you need t o start over during the ini tial setup pr ocess, you ca n reset the controll er to factory default settings. Note After resetting the conf igurati[...]

4-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Using the Configu ration Wizard Running th e Configuration Wizard on the C LI When t he contr oller bo ots at factor y default s, the bootup script runs the con figuration wizard, whic h prompts the installer for init ial conf iguration s[...]

4-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Mana gi ng th e S ystem Tim e an d Da te Step 18 En ter a c ount ry code for the un it. E nter hel p to list the supported countries. Note When you run the w izard on a wi reless c ontrol ler ne twork mod ule inst alled i n a C isco Int[...]

4-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Enablin g and Di sabling 802.1 1 Bands Ta b l e 4 - 1 lists commonly used country codes and the 802.11 bands that they allo w . For a complete list of coun try co des sup ported per pr oduct , refe r to www .ciscof ax.com or http://www .c[...]

4-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Configur ing Administrator User names and Passwords Ente r c onf ig 80211a disable ne twork to disab le 802.11 a operat ion on the cont roller . Enter config 80211a enable network to re -enable 802. 11a ope ratio n. Configuring Admi nis[...]

4-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Enablin g 802.3x F low Control Step 3 Ente r config snmp community access mode r o name to conf ig ure an SNMP com munity name with read-o nly p rivileges. Ente r config snmp community accessmode rw name to configure a n SNMP community n [...]

4-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Configuring Multicast Mode Configuring Multi cast Mode If your network supports packet multicastin g you can config ure the multicast method that the contr oller uses. The controller performs multicasting in two modes: • Unicast mode?[...]

4-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Configur ing the Supe rvisor 720 t o Support th e WiSM • When using Multiple controllers on the netw ork, make sure that the same multicast address is configured on a ll t he con trol lers. • Multicast mode does not work across inter[...]

4-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Con f igu rin g the Su pe rv iso r 7 20 to Sup p ort th e W iS M General WiSM Guidelines Keep these genera l guid elines i n min d when you a dd a W i SM to your network: • The swi tch ports leading t o the co ntroller service por t [...]

4-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Configur ing the Supe rvisor 720 t o Support th e WiSM Step 7 interface port-channel 2 Conf igure a port-channel to b u ndle the autom atically created Gigab it int erfaces 5-8 into an e therc hannel . a. switchport trunk encapsulation d[...]

4-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 4 Conf iguring Con troller Setting s Using the Wireless LAN Controlle r Network Module Using the Wirele ss LAN Controller Net work Module Ke ep these guidelines in mind when using a wir eless LAN controller netw ork module (CNM) install ed in a C isco Inte grated Servic e[...]

4-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 4 Confi guri ng Control ler Setti ngs Using the Wire less LAN Con troller Ne twork Mod ule[...]

C HAP TER 5-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 5 Configuring Security Solu tions This chapter describ es security solutions for wireless LANs. This cha pter contains these sections: • Cisco W LAN Solu tion Securi ty , page 5-2 • Conf ig uring the System for Spectra Link NetLink T elephones, pa ge 5-4 • Using Ma[...]

5-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Cisco WLAN Solution Sec urity Cisco WLAN Solution Security Cisco WLAN Solution Secur ity includes the follo wing sections: • Securi ty Overview , p age 5-2 • Layer 1 Soluti ons, page 5-2 • Layer 2 Soluti ons, page 5-2 • Layer 3 Soluti o[...]

5-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Cisco WLAN Solution Security Layer 3 Solutions The WEP proble m can be furth er solved using industry -standa rd Layer 3 secur ity solutio ns, such as VPNs (v irtua l priv ate n etworks), L 2TP ( Layer T wo T u nnelin g Protoc ol), and I [...]

5-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Configur ing the Syste m for SpectraL ink NetLin k Telephone s for and not ify wh en active), or m arkin g the m as Contai ned ro gue a ccess poi nts (have betw een o ne and four Ci sco 1 000 Series light weight access points discourage rog ue [...]

5-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Configuring the System for SpectraLink NetLink Telephones Using the GUI to Enable Long Preamb les Use this procedu re to use the GUI to enable long prea m bles to optimize the oper ation of SpectraLink NetLin k phones on your wire less LA[...]

5-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Using M anagem ent o ver Wireless Step 3 Ente r config 802.11b disable n etwork to disab le th e 802.1 1b/g network . (Y ou ca nnot enable lon g preamb les on the 80 2.11a network.) Step 4 Ente r config 802.11b preamble long to enable long prea[...]

5-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Config uring DHCP Using the CLI to Enable Manageme nt over W ireless Step 1 In the CLI, use the show network command to verif y whethe r the Mgmt V ia W ireless Interf ace is Enabl ed or Disabled. If Mg mt V ia W ireless Interface is Disa[...]

5-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizi ng the W eb Aut henticat ion Lo gin S creen Using the CLI to Config ure DHCP Foll ow these steps to use the CLI to config ure DHCP . Step 1 In the CLI, e nter show wlan t o verify whethe r you hav e a valid DH CP server a ssigned to t[...]

5-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Customizing the Web Authentication Login Screen Default Web Authen tication Operation When web authenticatio n is enabl ed, clients migh t recei ve a web -bro wser security alert t h e f irst tim e that the y attempt to acce ss a URL. Fig[...]

5-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizi ng the W eb Aut henticat ion Lo gin S creen Figur e 5-2 T ypical W eb A uthentication Login Wi ndow The cl ient must respon d with a userna me and password tha t you de fine using the Local Net U sers > New W eb U ser p age, or u [...]

5-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Customizing the Web Authentication Login Screen Figur e 5-3 T ypical Success ful Login Windo w The default lo gin s ucce ssful w indow contai ns a poi nter to a vi rtual gateway addr ess U RL, redire ct https://1.1. 1.1/logout.html. Y ou[...]

5-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizi ng the W eb Aut henticat ion Lo gin S creen Changing the Web Message Use this command to c h ange the W eb Authentication Login wind o w message: config custom-web webmessage message T o reset t he W eb Authentic ation Login windo w [...]

5-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Customizing the Web Authentication Login Screen Downloading the Logo or Gr aphic Foll ow these steps to dow nload the image fi le to the controlle r: Step 1 On th e CLI, en ter tran sfer do wnload star t a nd a nswer n to the prompt to v[...]

5-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Customizi ng the W eb Aut henticat ion Lo gin S creen Creating a Custom URL Redirect Creating a Custom URL Redirect Use this command to r edirect a ll web authenticati o n clients to a speci fic URL (i n cluding http :// or https://) aft er th[...]

5-15 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Customizing the Web Authentication Login Screen Exampl e: Sample Customiz ed Web Authen tication Log in Windo w Figure 5-4 sh ows a custom ized W eb Au thentic atio n Login window and t he C LI comm ands used to creat e it. Figur e 5-4 E[...]

5-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Conf iguri ng Id entity Network ing Configuring Identity Networking These se ction s explain the Ide ntity Networki ng feat ure, how it is configure d, and t he expect ed behavior for v arious se curity p olicies: • Identity Ne tworking Ov e[...]

5-17 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Configuring Identity Networking RADIUS Attributes Used in Identity Networking This section e xplains the RADIUS att r ib utes used in Identity Networking. QoS-Level This attrib ute indicates the Qu ality of Service lev el to be applied t[...]

5-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Conf iguri ng Id entity Network ing Interface-Name This attrib ute indicates the VLAN In terface a clie nt is to be associated to. A summary of the Interf ace-Name Attr ibute format is sho wn belo w . The fiel ds are transmitted from left to r[...]

5-19 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 5 Conf iguring Sec urity Solutions Configuring Identity Networking • T ag – The T ag field is one o ctet i n leng th and is int ended to provide a me ans of group ing att ributes in the sa me packet w hich re fer to th e same tu nnel. If the value of t he T ag field i[...]

5-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 5 Configuring Security Solutions Conf iguri ng Id entity Network ing[...]

C HAP TER 6-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 6 Configuring WLANs This ch apter d escrib es how to configure up t o 16 wi reless LA Ns for you r Cisco Wireless LAN Solution. This chap ter cont ains these sections : • W irel ess LAN O ver vie w , page 6-2 • Conf iguring W irele ss LANs, pa ge 6-2[...]

6-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Wirele ss LAN Over view Wireless LAN Overview The Ci sco Wireless LAN Solution can c ontrol u p to 16 wire less LA Ns for lightw eight access points. Each wireless LAN has a separate wireless L AN ID (1 through 16), a separate wireless LAN SSID (wirel ess L[...]

6-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 6 Configuring WLAN s Config uring Wi reless LANs Activating Wireless LANs After you hav e completely conf igured your wireless LAN setting s, enter conf ig wlan enable wlan-id to acti vate the wireless LAN. Assigning a Wireless LA N to a DHCP Server Each w ireless L AN can[...]

6-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Conf iguri ng Wi reless L ANs Configuring a Timeout for Di sabled Client s Y ou ca n configure a t imeout for disable d client s. Clients w ho fail to auth entica te three t imes whe n attemptin g to associate are automa tically disable d from further assoc[...]

6-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 6 Configuring WLAN s Config uring Wi reless LANs • If you w ant to change the 802 .1X encry p tion lev el for a wireles s LAN, use this comman d: config wlan se curity 802. 1X encr yption wlan -id [ 40 | 104 | 128 ] – Use the 40 option t o specify 40/ 64-bit encryp tio[...]

6-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Conf iguri ng Wi reless L ANs Configuring a Wireless LAN for Both St atic and Dynamic WEP Y ou can configure up to f our wi reless LANs to suppo rt sta tic WE P keys, and yo u can also configure dynami c WEP o n any of thes e stat ic-WEP w ireles s LAN s. F[...]

6-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 6 Configuring WLAN s Config uring Wi reless LANs IKE Authentication IPSec IK E (Inte rnet Key Exchange ) uses pre- share d key exchanges, x .509 (R SA Signat ures ) certificat es, and X Auth-ps k for authenti cation. Ente r these commands to e n able IPSec IKE on a wireles[...]

6-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Conf iguri ng Wi reless L ANs IPSec Passthrough IPSec IKE us es IPSec Passthrou gh to allow IPSec-capabl e client s to communic ate dire ctly with other IPSec e quipmen t. IPSec Passt hrough i s also known as VPN Passthrough . Enter this c ommand to ena ble[...]

6-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 6 Configuring WLAN s Config uring Wi reless LANs Configuring QoS Enhanced BSS (QBSS ) Y o u can en able QBS S in th ese two modes : • W i reless Mul timedia ( WMM) mode, whic h support s devices that mee t the 802 .11E QBSS stan dard • 7920 supp ort mode, whi ch supp o[...]

6-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 6 Configuring WLANs Conf iguri ng Wi reless L ANs Enabling 7920 Support Mode The 792 0 support mod e conta ins two option s: • Support for 7 920 ph ones th at re quire call admissio n con trol ( CAC) to be co nfigured on and advertis ed by the client device (t hese are typ [...]

C HAP TER 7-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 7 Controlling Lightweight Access Points This ch apt er descr ibes how to conn ect a ccess poi nts t o the cont roll er and m anage access point set tings. This chap ter cont ains these sections : • Lightwe ight Acce ss Point Overview , pa ge 7-2 • Using the D NS for [...]

7-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightwei ght Acce ss Poin t Overvi ew Lightweight Ac cess Point Overview This se ction de scribes Cisco l ightwe ight acce ss points. Cisco 1000 S eries IEEE 80 2.11a/b/g Lightweigh t Acces s Points The Ci sco 1000 serie s ligh tweight a[...]

7-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Lightweight Access Point Overview Cisco 1030 R emote Ed ge Lightw eight Acces s Points The only exception to the general rul e of lightwe ight acce ss points bei ng continuo usly con trolle d by Cisco Wireless LAN Con trolle rs is[...]

7-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightwei ght Acce ss Poin t Overvi ew Note that the Cisco 1030 remo te edge lightweig ht access point must ha ve a DHCP serv er av ailable on its loc al subn et, so it can obtain an IP addre ss upon re boot. Also n ote t hat the Cisco 10[...]

7-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Lightweight Access Point Overview Note t hat the wireless LAN operator can disable either one of each pair of the Cisco 1000 s eries lightwe ight access point intern al antennas to prod uce a 180-de gree sectorize d cov erage area[...]

7-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Lightwei ght Acce ss Poin t Overvi ew Cisco 1000 S eries Lig htweight Ac cess Poin t Con nectors The A P1020 a nd A P1030 Cisco 10 00 se ries l ightwe ight a ccess p oints have the following extern al conn ector s: • One RJ-4 5 Etherne[...]

7-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Using the DNS for Controller Discovery Cisco 1000 Series Lightweight Access Point External Power Su pply The Ci sco 1000 seri es light weight acce ss point can rec eiv e power from an externa l 110- 220 V AC- to-48 VD C power supp[...]

7-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Dynami c Freque ncy Select ion Dynamic Frequency Selection The Cisc o W i reless LA N solutio n comp lies with r egulations in E urope an d Singap ore that r equire ra dio devices to use Dynami c Freque ncy Selection (D FS) to detect rad[...]

7-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Autonomous Access Points Converted to Lightweight Mode Autonomous Access Po ints Converted to Lightweight Mode Y ou ca n use an upgra de con version tool to conv ert au tonomou s Cisco Airone t 1130AG, 1200, and 1240AG Series Acce[...]

7-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autono mous Ac cess Points Converted t o Lightwei ght Mod e Using a Controller to Retur n to a Previous Release Follow these ste ps to rev ert f rom ligh twei ght mo de to auto nomous mo de us ing a wirele ss LAN contro lle r: Step 1 Lo[...]

7-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Autonomous Access Points Converted to Lightweight Mode Controllers Acc ept SSCs from Ac cess Poin ts Converted to Lightw eight Mod e The light weight acces s point pr otocol (L W A PP) secure s the con trol co mmunic ation be twe[...]

7-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autono mous Ac cess Points Converted t o Lightwei ght Mod e Conver ted Acce ss Points S end Crash Information to Controller When a co n verted acc ess point une xpectedly re boots, th e acces s point s tores a cra s h f ile on its local[...]

7-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 7 Controlling L ightweigh t Access Poi nts Autonomous Access Points Converted to Lightweight Mode Disabling the Reset Button on Acces s Points Conver ted to Ligh tweight Mo de Y ou can disable the re set button on acc ess poi nts conv erted to light weight mod e. The r es[...]

7-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 7 Controlling Lightweight Access Points Autono mous Ac cess Points Converted t o Lightwei ght Mod e[...]

C HAP TER 8-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 8 Managing Controller Software and Configurations This cha pter descri bes how to manage configur ations and software versions on t he control lers. This chapte r contains these secti o ns: • T r ansferr ing Files to and fr om a Controlle r , pa ge 8-2 • Upgrad ing C[...]

8-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 8 Ma nagi ng Con tro ller So ftw are an d Co nfig urati ons Transfe rring Files t o and fro m a Controlle r Transferring Files to an d from a Controller Controllers ha ve built - in utilities for upload ing and do wnloading softw are, certif icates, and configurati on files. [...]

8-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 8 Managing Co ntroller Softwa re and Con figurations Upgrading Controller Software Step 5 Ente r transfe r download start and an swer n to the prompt t o vie w the current d o wnload settings. Th is example shows the comma nd output : > transfer download start Mode.....[...]

8-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 8 Ma nagi ng Con tro ller So ftw are an d Co nfig urati ons Saving Con figuration s Step 8 The con troller no w has the code u pdate in acti ve v olatile RAM, b ut you must enter r eset system to save the cod e update to non-v olatile NVRAM and reboot the Cisco W ireless LAN [...]

8-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 8 Managing Co ntroller Softwa re and Con figurations Resetting the Controller Step 3 Foll ow the instructions in the “Using the Configuration Wizard” se ction on page 4 -2 to complete th e initial conf iguration. Resetting the Controller Y ou c an res et the control le[...]

8-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 8 Ma nagi ng Con tro ller So ftw are an d Co nfig urati ons Resett ing the Controlle r[...]

C HAP TER 9-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 9 Configuring Radio Reso urce Management This cha pter descri bes radio re source manageme nt (RRM) an d explains how to configure it on the contr ollers. It co ntains the se s ecti ons: • Overview of Radio Resour ce Manage ment, pa ge 9-2 • Overview of RF Groups, pa[...]

9-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Overview of Radio Res ource M anageme nt Overview of Radio Resource Manageme nt The radio r es our ce managemen t (RR M) software em bedded in the controlle r acts as a bu ilt-in RF engine er to consist entl y provide real- time RF [...]

9-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Overvie w of Radio R esource Ma nagement Dynamic Cha nnel Assign ment T wo ad jacent access poi nts on the same chann el can caus e either signa l content ion or signal co llision . In the case of a collision, data is simply not re[...]

9-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Overview of Radio Res ource M anageme nt The co ntrolle r combin es this RF ch aracteri stic informati on with RRM alg orithm s to mak e system-w ide decisions. Conflictin g demands are resolve d using soft-decision metrics that gua[...]

9-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Overview of R F Groups RRM Benefits RRM produces a netw ork with optimal capac ity , performance, and reliability while en abling you to av oid the c ost of labo rious histor ical data in terpretation and individual lightweight acc[...]

9-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Configuring an RF Group The RF g r oup l ead er analyzes re al-time rad io data co llected b y the syst em and cal culates the ma ster power and chann el plan. Th e RRM algor ithms t ry to optimi ze aroun d a signal strength of –6[...]

9-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Config uring an RF Gr oup Using the GUI to Con figure an RF Gr oup Foll ow these step s to create an RF group using the GUI. Step 1 Click Contr oller > Ge neral to access the Genera l page (see Figure 9-1 ). Figu re 9-1 Ge neral[...]

9-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Viewing RF G roup Status Using the CL I to Configure R F Groups Follow these st eps to configure an R F gr oup u sing th e CL I. Step 1 Ente r config network rf-network-na me name to crea te a n R F grou p. Note Enter up to 19 ASCII[...]

9-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Viewin g RF Group Status Step 2 Under Gl obal RF , click e ither 802 .11a N etwork or 802. 11b/g Netwo rk to acc ess the Global P arameters page ( see Figur e 9-3 ). Figur e 9-3 Global P aramet ers P age Step 3 Click Au t o R F to [...]

9-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Viewing RF G roup Status Figur e 9-4 Global P aramet ers > A uto RF P ag e[...]

9-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Viewin g RF Group Status The top of this page sho ws the details of the RF group, specif ically ho w often the group informatio n is update d (600 sec onds by default), t he MA C addr ess of the RF group leader, whether thi s part[...]

9-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Enablin g Rogue Acce ss Point D etectio n Enabling Ro gue Access Point Detection After you have created an RF grou p of con troller s, you ne ed to configu re the acc ess poi nts co nnected t o the cont roller s to de tect rogue ac[...]

9-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Enablin g Rogue Acce ss Point Detect ion Figur e 9 -6 All APs > Details Pag e Step 4 Choose either local or monitor from the AP M ode d rop-down box an d cl ick Sav e Configuration to sav e your ch anges . Step 5 Repeat Step 2 [...]

9-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Enablin g Rogue Acce ss Point D etectio n Figur e 9-7 AP A uthentication P o lic y P ag e The name of the RF group to which this controller belongs app ears at the bot tom of the page . Step 7 Check the Enable AP Neig hbor Authenti[...]

9-15 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Configuring Dynamic RRM Using the CLI to Enable Ro g ue Access Po int Detection Foll ow these step s to enable rogue access po int detecti o n using the CLI . Step 1 Make sur e that eac h con trolle r in t he R F group has been c [...]

9-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Configur ing Dynam ic RRM Using the GUI to Configure Dynamic RRM Follow these st eps to configure dynami c RRM para meters using t he GUI. Step 1 Access the Globa l Parame ters > Auto RF page (see Figure 9-4 ). Note Click Se t t[...]

9-17 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Configuring Dynamic RRM RF Channel Assignment Channe l Assign ment Method The c ontroller’ s dynam ic channel a ssignment m ode. Options : Automatic , On Demand, or Of f Defa ult: Automatic Chan nel Assignment Method Description[...]

9-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Configur ing Dynam ic RRM A void Cisco A P Load Causes the c ontrol ler’ s RRM algor ithms to cons ider 80 2.11 traff i c from Cisco li ghtweight access points in your wirel ess network when assigning c hannel s. For example , RR[...]

9-19 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Configuring Dynamic RRM Tx P ower Le ve l Ass ignm ent Pow er Le vel Assignment Method The con trolle r’ s dyna mic p ower assignment mode. Options : Automatic , On De mand, o r Fix ed Defa ult: Automatic Power Leve l Assignment[...]

9-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Configur ing Dynam ic RRM The foll owing non-configurabl e transmit power level parameter set tings are also shown: • Pow er T h re sh o ld and P ower Nei ghbor Count— These param eters are use d to fi ne tune the po wer contro[...]

9-21 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Configuring Dynamic RRM Clie nt Min Ex cepti on Lev el (1 to 7 5) The minimu m number of cl ients on an a ccess poi nt with a signal-to -noise ratio ( SNR) below the Co vera ge threshold. This threshold works in conju nction with [...]

9-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Configur ing Dynam ic RRM Step 3 Click Sa ve Configuration to save your change s. Step 4 Repeat this proced ure to set the s ame pa rame ter values f or every co ntrolle r in t he R F group . Using the CL I to Configure D ynamic RR[...]

9-23 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Overridi ng Dynamic RRM Step 3 Perform on e of the following: • T o have RRM automatic ally set the transmit power for all 802.11 a or 802.1 1b/g radios at period ic inter vals, ente r one of the se co mman ds: – conf ig 8 02.[...]

9-24 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Overr iding Dynami c RRM Statically Assigning Cha nnel and Transmit Power Se ttings to Access Point Radios This section pro vides instructions for staticall y assigning channel and po wer settings using the GUI or CLI. Note Cisc o [...]

9-25 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Overridi ng Dynamic RRM Figur e 9-9 Cisco APs > Co nfigure P age Step 4 T o assign an R F channe l to the ac cess poin t radio, choo se Custom for the Assig nment Me thod un der R F Channel Assig nment an d choose a channel fro[...]

9-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement Overr iding Dynami c RRM Using the C LI to S tatically Assign Channel an d Transmit Pow er Sett ings Follow these steps to statical ly assign ch annel an d/or pow er setting s on a per acce ss point radi o basis using the CLI. Step[...]

9-27 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 9 Configuring Rad io Resource Manage ment Overridi ng Dynamic RRM Disabling Dy namic Chann el and Power As signment Glob ally for a Co ntroller This section pro vides instructions for disabling dynam ic channel and po wer assignment using the GUI or CLI. Using the GUI to [...]

9-28 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapt er 9 Conf igurin g Radio Reso urce Mana gement View in g Add itio nal R RM Sett ings U sin g the CLI Viewing Additional RRM Setti ngs Using the CLI Use t hese comm ands to view addi tional 802.11a an d 802. 11b/g RRM setting s: • show advanced 802.11a ? • show advanced 802.[...]

C HAP TER 10-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 10 Configuring Mobility Groups This chapter descr ibes mobility grou ps and explain s ho w to confi g ure them on the contr o llers. It contains these sectio ns: • Ove rvie w of Mobility , page 10-2 • Overvie w of M obility Groups, page 10-5 • Conf iguring Mobilit[...]

10-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Overvi ew of Mob ility Overview of Mobility Mobility , or ro a m i n g , is a wireless LAN c lient’ s ability to maint ain its associat ion seamlessly f rom one access poi nt to another securely and with as little late ncy as pos sible. This s[...]

10-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Overview of Mobility The process becom es more complicated , how ever , when a client roams from an access point jo ined to one c ontroller to an acces s point joined to a dif ferent c ontroller . It also va ries based on whether th e cont[...]

10-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Overvi ew of Mob ility Figur e 1 0-3 I nt er -Subnet Roaming Inter -subnet r oaming is similar to inter-co ntroller r oaming in tha t the contr ollers e xchange mobili ty messages on the c lient r oam. H owe ver , inste ad of m oving the client [...]

10-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Overview of Mobility Groups Note Both inter- controller ro aming and inter -subnet roaming req uire the contr o llers to be i n the same mobility group. See the next two sections for a d escription o f mobility groups and instructions for [...]

10-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Overvi ew of Mob ility Grou ps As shown abov e, each controller is configur ed with a list of the other memb ers of the mobility group. Whene ver a ne w client joi n s a co ntroller , the contr o ller se nds out a un icast message to all of the [...]

10-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Configuring Mobility Groups Note Clients may roa m between ac cess points in d if ferent mobilit y groups, provided t hey ca n hear them. Ho we ver , their sessio n informat ion is not c arried betwe en controllers in differen t mobility g[...]

10-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configur ing Mobilit y Groups • All contr o llers must be configur ed with the same v irtual in terface IP address. Note If necessary , you can change the v irtual interface I P addr ess by edit ing the virtua l inte rface name on the Controll[...]

10-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Configuring Mobility Groups This page sho ws the mobility group name in th e Default Mob ility Group f ield and lists the MA C address and IP add ress of each c ontroller that is currently a member o f the mob ility group. The fi rst entry[...]

10-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Configur ing Mobilit y Groups e. Repeat Step a thro ugh Step d to add all of the con trollers in the mobili ty group. f. Repeat t his pro cedu re on every contro ller to be inc luded in the mobility group. All contro llers in the mobility group[...]

10-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Configuring Auto-Anchor Mobility Using the CLI to Con figure M obility Groups Foll ow these steps to configure mobility groups using the CLI. Step 1 Ente r show mobility summary to check the cur rent mobil ity settings. Step 2 Ente r conf[...]

10-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Conf iguri ng Aut o-Anch or Mobi lity WLAN and cre ates a foreign session fo r the client on the local switch . Pack ets from the clie nt are encaps ul ated th rough a mo bility tunnel using Ether IP and se nt to th e anch or cont rolle r , whe[...]

10-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Chapter 1 0 Configuring Mob ility Groups Configuring Auto-Anchor Mobility Figu re 1 0 -9 W LAN s Page Step 2 On the WLA N s page, c lick the Mobilit y Anchors link for the de sired WLAN. The Mobil ity Anchors page for th at WLAN ap pear s (see Figure 10-10 ). Figur e 1 0-1 0 Mob[...]

10-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Chapter 10 Configuring Mobility Groups Conf iguri ng Aut o-Anch or Mobi lity Using the CLI to Config ure A uto-Anchor Mobility Use these commands to con figure au to-anchor mobil ity using the CLI. 1. Ente r config wlan disable wl an-id to disa ble the WLAN for which you are co nfig[...]

A- 1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 APPEND IX A Safety Considerations and Translated Safety Warnings This appendix lists safety consid erations and tran slations of the sa fety warning s that apply to the Cisco Unif ied W ireless Netw ork Solution products. The follo wing safety con siderat ions and saf e ty wa rni[...]

A- 2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Safety Consider ations Safety Considerations Keep these guideline s in mind when instal ling Cisc o W irele ss LAN Solution products: • The Ci sco 1000 Serie s light weight access points with or wit hout extern al an [...]

A-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Warning Definition Va r o i tu s TÄRKEITÄ TURV A LLISUUSOHJEIT A Tämä varoitusmerkki merkitsee vaaraa. T ilanne voi ai heuttaa ruumiillisia vammoja. Ennen kuin käsittelet laitt eistoa, huomioi sähköpiirien [...]

A- 4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Warning De finiti on Avi s o INSTR UÇÕES IM PORT ANTES DE SEGURAN ÇA Este símbolo de aviso significa perigo. V ocê está em uma situação que poderá ser causadora de lesões corporais. Antes de iniciar a utiliza?[...]

A-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Class 1 Laser Product Warning Class 1 Laser Product Warning Note Th e 1000BASE-SX and 1000BASE-LX SFP modules and AI R-WLC4 112-K9, AIR- WLC4124-K9 , and AIR-WLC 4136-K9 Ci sco 4100 Ser ies W ireless LAN Controlle[...]

A- 6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Class 1 Las er Produc t Warning Avi s o Produto a laser de classe 1. Advarsel Klasse 1 laserprodukt.[...]

A-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Grou nd C ond uct or W arnin g Ground Conducto r Warning War ni n g This equipment must be grounded. Never defeat th e ground conductor or operate the equipment in the absence of a suitably installed ground condu [...]

A- 8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Ground Con ductor W arning Wa rnu n g Dieses Gerät muss geerdet sein. Auf keinen Fall den Erdungsleiter unwirksam machen o der das Gerät ohne einen sachgerecht installierten Erdungsle iter verwenden. W enn Sie sich ni[...]

A-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Chassis Warning for Rack-Mounting and Servicing Chassis Warning fo r Rack-Mounting and Servicin g War ni n g T o prevent bodily injury when mounting or servici ng this unit in a rack, you must take special precaut[...]

A-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Chassis War ning for Rack -Mountin g and Servici ng Va ro it us Kun laite asetetaan telineeseen tai huolletaan sen ollessa telineessä, on noudatettava erityisiä varotoimia järjestelmän vakavuuden säilytt ämis eksi[...]

A-11 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Chassis Warning for Rack-Mounting and Servicing Avi s o Para se prevenir contra danos corporais ao montar ou reparar esta unidade num a estante, deverá tomar precauções especiais para se certificar de que o si[...]

A-12 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Chassis War ning for Rack -Mountin g and Servici ng Avi s o Para evitar lesões corporais ao montar ou dar manutenção a esta unidade em um rack, é necessário tomar todas as precauções para gar ant ir a estabilidad[...]

A-13 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Chassis Warning for Rack-Mounting and Servicing[...]

A-14 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Chassis War ning for Rack -Mountin g and Servici ng[...]

A-15 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Chassis Warning for Rack-Mounting and Servicing • • • • • • • • •[...]

A-16 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Chassis War ning for Rack -Mountin g and Servici ng[...]

A-17 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Chassis Warning for Rack-Mounting and Servicing[...]

A-18 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Battery H andling Wa rning for 4 400 Series Con trollers Battery Handling Warning for 4400 Series Controllers War ni n g There is the danger of explosion if the Cisco 4400 Se ries Wireles s LAN Controller battery is rep[...]

A-19 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Battery Hand ling Warning for 4400 Series C ontrollers Wa rnu n g Bei Einsetzen einer falschen Batterie besteht Explosionsgefahr . Ersetzen Sie die Batterie nur durch den gleichen oder vom Hersteller empfohlenen [...]

A-20 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Equipmen t Instal lation Wa rning Equipment Installa tion Warning War ni n g Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 10 30 Waarschuwing Deze appar[...]

A-21 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings Equipment Install ation Warni ng ¡Advertenc ia! Solamente el personal calificado debe instalar , reemplazar o utilizar este equipo. V arni ng! Endast utbildad och kvalificerad personal bör få tillåtelse att i[...]

A-22 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings Equipmen t Instal lation Wa rning[...]

A-23 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings More Tha n One Power Supp ly W arning for 4400 S eries Contr ollers More Than One Power Supply Warning for 4400 Series Controllers War ni n g The Cisco 4400 Series Wireless LAN Controller might have more than on [...]

A-24 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings More Than O ne Power Sup ply War ning for 4400 Series Cont rollers Avi s o Esta unidade pode ter mais de uma conexão de fonte de alimentação. T odas as conexões devem ser removidas para interromper a alimentação d[...]

A-25 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix A Safety Considera tions and Translat ed Safety Wa rnings More Tha n One Power Supp ly W arning for 4400 S eries Contr ollers[...]

A-26 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix A Safety Considerations a nd Translated Safety Warnings More Than O ne Power Sup ply War ning for 4400 Series Cont rollers[...]

B-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 APPEND IX B Declarations of Conf ormity and Regulatory Information This a ppend ix provide s de clara tions of confo rmity and regulat ory inf ormat ion f or t he produ cts in the Cisco Unif ied W ireless Network Solution. This a ppendix conta ins these sec tions: • Regulatory I[...]

B-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulat o ry In formatio n for 1 000 Series Acc ess Poi nts Regulatory Information fo r 1000 Series Access Points This se ction contai ns regulato ry i nformat ion fo r 1000 serie s acce ss points. The inform ation i s i[...]

B-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix B Declarat ions of Con formity and Regulato ry Informa tion Regulator y Information fo r 1000 Series Access Points occur . If this equipme nt does c ause in terferen ce t o radio o r television rece ption, which ca n be deter mined by turni ng the equipme n t of f and on[...]

B-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulat o ry In formatio n for 1 000 Series Acc ess Poi nts Europe an Community, S witzerland, No rway, Icela nd, and Lie chtenstein Model: AIR-AP1 010-E -K9, AIR -AP102 0-E-K9, AI R-AP1030- E-K9 Declaration of Conformit[...]

B-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix B Declarat ions of Con formity and Regulato ry Informa tion Regulator y Information fo r 1000 Series Access Points Note This equipment is inten ded to be used in all EU and EFT A countries. Outdoor use may be restricted to certai n freque ncies and/or may req uire a lice[...]

B-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information Regulat o ry In formatio n for 1 000 Series Acc ess Poi nts Guidelines for Operating Cisco Aironet Access Points in Japan This section provides guidelin es fo r a v oiding interf erence when operati ng Cisc o Airo net ac[...]

B-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix B Declarat ions of Con formity and Regulato ry Informa tion Regulator y Information fo r 1000 Series Access Points Administrative Rules for Cisco Ai ro net Acc ess Po ints in Taiwan This sect ion provides adm inistra tiv e rules fo r oper ating Cisco A ironet a ccess poi[...]

B-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information FCC St atemen ts for Ci sco 20 00 Serie s Wireless LAN Control lers English Tr anslation Administr ativ e Rules for L ow-po wer Radio- Frequency Devices Article 12 For those l ow-po wer r adio-f requency devices th at ha[...]

B-9 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix B Declarat ions of Con formity and Regulato ry Informa tion FCC Statem ents for Cisc o 4100 Series Wirel e ss LAN Controll ers and Cisco 4400 S eries Wireless LAN C ontrollers FCC Statements for Cisco 4100 Series Wireless LAN Controllers and Cisco 4400 Series Wireless LA[...]

B-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix B Declarations of Conformity and Regulatory Information FCC Statement s for Cisco 4100 Series Wireles s LAN Contro llers and Cisc o 4400 Series Wireless LAN Contr ollers[...]

C-1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 APPEND IX C End User License and Warranty This appe ndix descri bes the e nd user licens e and warranty t hat apply t o the Cisco Unified Wireless Network Soluti on products : • Cisco 1000 Serie s Lightw eight A ccess Points • Cisco 2000 Serie s W ireles s LAN Controll ers •[...]

C-2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendi x C End User Licen se and Warrant y End User License Agre emen t End User License Agreemen t End User License Agreement IMPOR T ANT : PLEASE READ THIS END USER LICENS E A GREEMENT CAREFULL Y . DO WNLO ADING, INST ALLING OR USING CISCO O R CISCO-SUPPLI ED SOFTW ARE CONSTITUT ES[...]

C-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix C End User Licens e and War ranty End User Lic ense Agreement (ii) make error correct ions to or othe rwise modify or adapt the Sof tware or cr eate deriv at ive works based upon the Software, or permi t third pa rties to do the same ; (iii) re verse engin eer or dec o m[...]

C-4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendi x C End User Licen se and Warrant y Limited Warr anty T erm and T ermination. This Agreement and the lice nse granted herei n shall remain ef fecti ve until termin ated. Cu stomer may ter minate this Agre ement and the license at any t ime by d estroying a ll copies of Softw a[...]

C-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix C End User Licens e and War ranty Limite d Warranty replace ment part s used in Har dware rep lacemen t may be new or equiv a lent to new . Cisco 's obliga tions hereund er ar e condi tioned upon the r eturn of af fecte d Hardware in acco rdance with Cisco' s o[...]

C-6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendi x C End User Licen se and Warrant y General Terms Appl icable to the Limited Wa rranty Stateme nt and En d User Licens e Agreemen t Disclaimer of Warranty DISCLAIMER OF WARRANTY EXCEPT AS SPE CIFIED IN THIS W ARRANTY , ALL EXPRESS OR IM PLIED CONDITIONS , REPRESEN T A TIONS, A[...]

C-7 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix C End User Licens e and War ranty Additional Open Source Terms the parties with respect t o the license of the Sof tware an d Document ation and supersedes any con f licting or addi tional t erms con taine d in any purc hase ord er or e lsewhere, all of w hich t erms are[...]

C-8 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendi x C End User Licen se and Warrant y Addition al Open Sour ce Terms[...]

D- 1 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 APPEND IX D System Messages and Access Point LED Patterns This appendix lists system messages that can appear on the Cisco Unifie d W ireless Network Solution interfaces and de scribes the LED patte rns on lightwe ight acc ess points. It cont ains these sections: • System Messa[...]

D- 2 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Ac cess Point LED P atterns System M essag es System Messages Ta b l e D - 1 lists system messages and descriptions. T a ble D-1 System Messa ges and De scriptions Error Messa ge Descrip tion ST A TION_DISASSOCIA TE Client ma y hav e intentionally te rm[...]

D-3 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix D System Mes sage s and Ac cess Poin t LED Patt erns System Messages LRADIF_CURREN T _CHANNEL_ CHANGED Infor mational m essage. LRADIF_R TS_THRESHOLD_CHANG ED In formatio nal message. LRADIF_ED_THR ESHOLD_CHA NGED Infor mational m essage. LRADIF_FRA GMENT A TION_THRE SHO[...]

D- 4 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Ac cess Point LED P atterns Using Client Reason an d Status Codes i n Trap Logs Using Client Re ason and Status Codes in Trap Logs The WCS Clien ts > Detail page lists the rea son and stat us codes that you are likel y to encounter w hen re vie wing [...]

D-5 Cisco Wi reless LAN Co ntroller Conf iguration Gui de OL-8335-02 Append ix D System Mes sage s and Ac cess Poin t LED Patt erns Using Cl ient Re ason and Sta tus Codes in Trap Logs Client St atus Code s This tabl e lists client sta tus codes. Clie nt Status Codes 2 previousAuthNotV alid Client associated b ut not authorized. 3 d eauth entic ati[...]

D- 6 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Appendix D System Messages and Ac cess Point LED P atterns Usin g Ligh tweight Access Po int LEDs Using Lightweight Acce ss Point LEDs This t able descri bes the m ean ing of LED pa ttern s on l ightwei ght a ccess po ints. T able D-4 Cisc o 1 00 0 Ser ies Lightwe ight Acces s P oint[...]

IN-1 Cisco Wi reless LAN C ontrolle r Configur ation Guide OL-8335-02 INDEX Numerics 7920 support mode 6-9 802. 11 band s, en abli ng and disa blin g 4-6 802.1 X dynami c key settings 6-4 802.3 x flow c ontrol 4-8 A acces s point LEDs xi v , D-1 acces s points config uring 4 400 se ries c ontrol ler to support more than 48 3-30 to 3-36 number supp [...]

Index IN-2 Cisco Wi reless LAN Co ntroller Conf igurat ion Guid e OL-8335-02 Cisco 4400 Serie s Wireless L AN Co ntrollers config uring to support more than 48 acc ess points 3-30 to 3-36 models 3-3 ports 3-2, 3-3 Cisco APs > Configur e page 9-25 Cisco WiSM, ports 3-3, 3-4 client locati on 1-9 Clie nt Min Exce ption Level th resh old pa ramet er[...]

Inde x IN-3 Cisco Wi reless LAN C ontrolle r Configur ation Guide OL-8335-02 config 802.11b t xPower co mman d 9-26 config 802.11b txPow er globa l comma nd 9-23 config ap mod e comm and 9-15 config in terface acl ap-man ager comma nd 3-13 conf ig interface acl managem ent comman d 3-12 config inte rface a ddress ap-m anag er com man d 3-13 config [...]

Index IN-4 Cisco Wi reless LAN Co ntroller Conf igurat ion Guid e OL-8335-02 F FCC Declaration of Confo rmity B-2 flow co ntrol 4-8 foreig n control ler, in in ter-sub net roam ing 10-4 Forward Delay parame ter 3-25, 3-26 G Gene ral pa ge 3-29, 9-7 Global Parameters > Auto RF page 9-10 Global Para meters page 9-9 Group M ode pa ramet er 9-11, 9-[...]

Inde x IN-5 Cisco Wi reless LAN C ontrolle r Configur ation Guide OL-8335-02 Max Age paramete r 3-25 Max imum Age pa rameter 3-25 mirror mode See port mir roring 3-20 mobility, ove rview 10-2 to 10-5 Mobility Anch or Create button 10-13 mobility a nchors See auto- anchor mobility 10-11 Mobility Anchor s page 10-13 Mobilit y Group Member > New pa[...]

Index IN-6 Cisco Wi reless LAN Co ntroller Conf igurat ion Guid e OL-8335-02 debug c ommands 9-28 disabling dy nami c channel and powe r assignm ent us ing the CLI 9-27 disabling dy nami c channel and powe r assignm ent us ing the GUI 9-27 overri ding dynam ic RRM 9-23 to 9-27 overvi ew 9-2 to 9-5 overvi ew of dynam ic RRM 9-15 statically a ssig ni[...]

Inde x IN-7 Cisco Wi reless LAN C ontrolle r Configur ation Guide OL-8335-02 show wl an mobility an chor co mmand 10-14 Signal Meas urement parame ter 9-22 Signal Stre ngth Co ntribu tion par ameter 9-18 SNMP al ert 9-20 SNMP settings 4-7 snmp traps 4-8 Spanning Tree A lgorith m para meter 3-25 Spanning Tree Pro toco l (STP) config uring using the [...]

Index IN-8 Cisco Wi reless LAN Co ntroller Conf igurat ion Guid e OL-8335-02 wireless L ANs, configur ing both static and dynamic WEP 6-6 WiSM guidelines 4-10 wizard , startup 4-2 WLANs, describe d 3-8 to 3-9 WLANs page 10-12 WMM 6-9 world mo de 4-8 WPA 6-5[...]