Getting Started Guide
Page 3
... regulations. The 2504 controllers supports up to provide system-wide wireless LAN functions. Dispose of used batteries according to the Controller The 2504 controller works in the absence of the electrical ground before installing the controller. Replace the battery only with Cisco lightweight access points and the Cisco Wireless Control System (WCS) to 50 lightweight access points in the rack (input: 100 to deliver centralized security policies, guest access, Wireless Intrusion Prevention System...
... regulations. The 2504 controllers supports up to provide system-wide wireless LAN functions. Dispose of used batteries according to the Controller The 2504 controller works in the absence of the electrical ground before installing the controller. Replace the battery only with Cisco lightweight access points and the Cisco Wireless Control System (WCS) to 50 lightweight access points in the rack (input: 100 to deliver centralized security policies, guest access, Wireless Intrusion Prevention System...
Getting Started Guide
Page 4
... connection of how controllers function in a wireless LAN network. Figure 1 shows a 2504 controller network topology and network connections, showing the medium dependent interface (MDI) Ethernet cables required. Figure 1 Typical Controller Topology and Network Connections Console emulator for initial boot-up Null modem serial cable (DB-9 -> RJ-45) to console connection Cisco WCS software, web user interface 10/100/1000BASE-T MDI cable Network Distribution system connection LAN link for management software connections WAN or LAN connection to Cisco 2500 Series Wireless Controllers...
... connection of how controllers function in a wireless LAN network. Figure 1 shows a 2504 controller network topology and network connections, showing the medium dependent interface (MDI) Ethernet cables required. Figure 1 Typical Controller Topology and Network Connections Console emulator for initial boot-up Null modem serial cable (DB-9 -> RJ-45) to console connection Cisco WCS software, web user interface 10/100/1000BASE-T MDI cable Network Distribution system connection LAN link for management software connections WAN or LAN connection to Cisco 2500 Series Wireless Controllers...
Getting Started Guide
Page 5
... is within the normal range of the allowed values before setting the baud rate. Figure 2 Front Panel and LEDs 282249 CONSOLE CONSOLE CISCO 2500 Series WIRELESS CONTROLLER RESET Model 2504 1 2 3 4 PWR SYS ALM RESET 1 2 3-4 POE PWR ALM SYS Table 1 Callout WLC2504 Front Panel Component Descriptions Port and LEDs State and Description CONSOLE CPU console port The CPU console port is not available; At boot-up the controller configures the RS-232 port as a console port with default settings of 1200, 2400, 4800...
... is within the normal range of the allowed values before setting the baud rate. Figure 2 Front Panel and LEDs 282249 CONSOLE CONSOLE CISCO 2500 Series WIRELESS CONTROLLER RESET Model 2504 1 2 3 4 PWR SYS ALM RESET 1 2 3-4 POE PWR ALM SYS Table 1 Callout WLC2504 Front Panel Component Descriptions Port and LEDs State and Description CONSOLE CPU console port The CPU console port is not available; At boot-up the controller configures the RS-232 port as a console port with default settings of 1200, 2400, 4800...
Getting Started Guide
Page 6
.... The POE controller is met between chassis ground and any 48V/Ethernet signal. do so over -Ethernet (POE) ports The Gigabit POE ports are PoE only ports; If software needs to reset the POE controller, it can be used for infra-switch connection using multiple an AP-Manager or data interface. 6 The ports can do not connect access point devices to I2C address 0x40/41 (0100 000r/w). LED description: • Green or Blinking Green-Link activity • Off-No link 3 & 4 POE GigE Power-over I2C. The POE controller reset is...
.... The POE controller is met between chassis ground and any 48V/Ethernet signal. do so over -Ethernet (POE) ports The Gigabit POE ports are PoE only ports; If software needs to reset the POE controller, it can be used for infra-switch connection using multiple an AP-Manager or data interface. 6 The ports can do not connect access point devices to I2C address 0x40/41 (0100 000r/w). LED description: • Green or Blinking Green-Link activity • Off-No link 3 & 4 POE GigE Power-over I2C. The POE controller reset is...
Getting Started Guide
Page 9
... controller at factory, if selected. • Two Number 6 Phillips pan-head screws for mounting the controller on CLI console (PC, laptop, or palmtop) - Controller with factory-supplied power cord and mounting hardware - 2 Unpacking and Preparing the Controller for Operation Follow these steps to connect CLI console and controller 9 Check each item for operation: Step 1 Step 2 Step 3 Open the shipping container and carefully remove the contents. Network, operating system service network, and access point cables as required • Command-line interface (CLI) console...
... controller at factory, if selected. • Two Number 6 Phillips pan-head screws for mounting the controller on CLI console (PC, laptop, or palmtop) - Controller with factory-supplied power cord and mounting hardware - 2 Unpacking and Preparing the Controller for Operation Follow these steps to connect CLI console and controller 9 Check each item for operation: Step 1 Step 2 Step 3 Open the shipping container and carefully remove the contents. Network, operating system service network, and access point cables as required • Command-line interface (CLI) console...
Getting Started Guide
Page 10
... as controller. Cisco uses an integral TFTP server. Note You must enter a username and password and the configured username and password cannot be hijacked). - An SSID can contain up to 32 printable, case-sensitive ASCII characters. • DHCP bridging • Whether or not to clients and the management interface. • A virtual gateway IP address (a fictitious, unassigned IP address, such as 1.1.1.1, used by all Cisco wireless controller Layer 3 security and mobility managers). • A Cisco wireless controller mobility or RF group...
... as controller. Cisco uses an integral TFTP server. Note You must enter a username and password and the configured username and password cannot be hijacked). - An SSID can contain up to 32 printable, case-sensitive ASCII characters. • DHCP bridging • Whether or not to clients and the management interface. • A virtual gateway IP address (a fictitious, unassigned IP address, such as 1.1.1.1, used by all Cisco wireless controller Layer 3 security and mobility managers). • A Cisco wireless controller mobility or RF group...
Getting Started Guide
Page 11
...° F (0 to the Cisco Wireless LAN Controller Configuration Guide for this installation. Leave at cisco.com. • Status of the 802.11a, 802.11b, 802.11g, or 802.11n networks, either enabled or disabled. • RADIUS server IP address, communications port, and secret if you install it . • Make sure that water or excessive moisture cannot get into the controller. • Make sure that the power cord can reach...
...° F (0 to the Cisco Wireless LAN Controller Configuration Guide for this installation. Leave at cisco.com. • Status of the 802.11a, 802.11b, 802.11g, or 802.11n networks, either enabled or disabled. • RADIUS server IP address, communications port, and secret if you install it . • Make sure that water or excessive moisture cannot get into the controller. • Make sure that the power cord can reach...
Getting Started Guide
Page 13
... each side of space around the controller ventilation openings to the Network For configuration instructions about using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on the table or shelf near an AC power source. Mounting the Controller on a Wall (Rack-Mount Brackets) The controller can order a kit with the controller. Failure to use the correct hardware or to the system. Warning Read...
... each side of space around the controller ventilation openings to the Network For configuration instructions about using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on the table or shelf near an AC power source. Mounting the Controller on a Wall (Rack-Mount Brackets) The controller can order a kit with the controller. Failure to use the correct hardware or to the system. Warning Read...
Getting Started Guide
Page 15
Mounting the Controller on a Wall (Mounting Screws) When mounting the 2504 controller on a wall using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on the wall, perform the following tasks to complete the installation: • Connecting the Controller Console Port • Securing the Power Adapter Cable • Connecting to the Network For configuration instructions about using mounting screws, always mount the controller with the front panel facing down. 15 Figure 6 Mounting the...
Mounting the Controller on a Wall (Mounting Screws) When mounting the 2504 controller on a wall using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on the wall, perform the following tasks to complete the installation: • Connecting the Controller Console Port • Securing the Power Adapter Cable • Connecting to the Network For configuration instructions about using mounting screws, always mount the controller with the front panel facing down. 15 Figure 6 Mounting the...
Getting Started Guide
Page 20
Figure 10 Mounting the Controller in a 19-Inch Rack 1 282086 1 #10-32 pan-head screws or #12-24 slotted head screws Step 3 Step 4 After the controller is mounted in the rack, perform the following tasks to complete the installation: • Connecting the Controller Console Port • Securing the Power Adapter Cable • Connecting to the Network For configuration instructions about using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on page 23. 20
Figure 10 Mounting the Controller in a 19-Inch Rack 1 282086 1 #10-32 pan-head screws or #12-24 slotted head screws Step 3 Step 4 After the controller is mounted in the rack, perform the following tasks to complete the installation: • Connecting the Controller Console Port • Securing the Power Adapter Cable • Connecting to the Network For configuration instructions about using the CLI setup program, see the "Running the Bootup Script and Power-On Self Test" section on page 23. 20
Getting Started Guide
Page 23
... customer-supplied cable lock, such as described in the "Connecting the Controller Console Port" section on the back of the controller code, press Esc when the boot loader prompt appears. Refer to Figure 3 for the location of the security lock. 4 Running the Bootup Script and Power-On Self Test When you should have connected your PC to the CLI console on the back panel. Plug a country-specific power cord...
... customer-supplied cable lock, such as described in the "Connecting the Controller Console Port" section on the back of the controller code, press Esc when the boot loader prompt appears. Refer to Figure 3 for the location of the security lock. 4 Running the Bootup Script and Power-On Self Test When you should have connected your PC to the CLI console on the back panel. Plug a country-specific power cord...
Getting Started Guide
Page 24
...:51:36 by cisco) Board Revision 0.0 (SN: PSJ143302MT, Type: AIR-CT2504-K9) (P) Verifying boot loader integrity... Do not reboot the controller until the user login prompt appears. Step 3 Observe the bootup using the CLI screen. Continue booting the controller or press Esc to three minutes. Loading primary image (7.0.114.76) 100% 31427987 bytes read Launching images... Format FLASH Drive 6. Model: 1GB CompactFlash Card Firm: CF...
...:51:36 by cisco) Board Revision 0.0 (SN: PSJ143302MT, Type: AIR-CT2504-K9) (P) Verifying boot loader integrity... Do not reboot the controller until the user login prompt appears. Step 3 Observe the bootup using the CLI screen. Continue booting the controller or press Esc to three minutes. Loading primary image (7.0.114.76) 100% 31427987 bytes read Launching images... Format FLASH Drive 6. Model: 1GB CompactFlash Card Firm: CF...
Getting Started Guide
Page 25
... Switching Services: ok Starting QoS Services: ok Starting Policy Manager: ok Starting Data Transport Link Layer: ok Starting Access Control List Services: ok Starting System Interfaces: ok Starting Client Troubleshooting Service: ok Starting Management Frame Protection: ok Starting Certificate Database: ok Starting VPN Services: ok Starting Licensing Services: ok Starting LWAPP: ok Starting CAPWAP: ok Starting LOCP: ok Starting Security Services: ok 25 Num of Cisco Systems, Inc. Flags-[DUTY CYCLE] : ok Fastpath CPU00: Initializing last packet received queue. Installing ether-pow driver...
... Switching Services: ok Starting QoS Services: ok Starting Policy Manager: ok Starting Data Transport Link Layer: ok Starting Access Control List Services: ok Starting System Interfaces: ok Starting Client Troubleshooting Service: ok Starting Management Frame Protection: ok Starting Certificate Database: ok Starting VPN Services: ok Starting Licensing Services: ok Starting LWAPP: ok Starting CAPWAP: ok Starting LOCP: ok Starting Security Services: ok 25 Num of Cisco Systems, Inc. Flags-[DUTY CYCLE] : ok Fastpath CPU00: Initializing last packet received queue. Installing ether-pow driver...
Getting Started Guide
Page 27
...': '/usr/bin/gettyOrMwar' Cryptographic library self-test....passed! Cisco AireOS Version 7.0.114.76 Firmware Version PIC 14.0 Initializing OS Services: ok Initializing Serial Services: ok Initializing Network Services: ok Initializing Licensing Services: ok Starting ARP Services: ok Starting Trap Manager: ok Starting Network Interface Management Services: ok Starting System Services: ok Starting Fastpath Hardware Acceleration: ok Starting Fastpath Console redirect : ok 27 All rights reserved. Do not reboot the controller until the user login prompt appears. Run primary image (7.0.114...
...': '/usr/bin/gettyOrMwar' Cryptographic library self-test....passed! Cisco AireOS Version 7.0.114.76 Firmware Version PIC 14.0 Initializing OS Services: ok Initializing Serial Services: ok Initializing Network Services: ok Initializing Licensing Services: ok Starting ARP Services: ok Starting Trap Manager: ok Starting Network Interface Management Services: ok Starting System Services: ok Starting Fastpath Hardware Acceleration: ok Starting Fastpath Console redirect : ok 27 All rights reserved. Do not reboot the controller until the user login prompt appears. Run primary image (7.0.114...
Getting Started Guide
Page 30
... in-band management of the access point manager interface. You can access the controller GUI interface using the management interface IP address. Enter the IP address of the management interface (a valid VLAN identifier or 0 for each . Enter the port number of the controller and connectivity to enterprise services such as AAA servers. Table 3 Startup Wizard Information Wizard Setting System Name Administrative user name Administrative password Action Enter the system name, which is no default administrative password, you must...
... in-band management of the access point manager interface. You can access the controller GUI interface using the management interface IP address. Enter the IP address of the management interface (a valid VLAN identifier or 0 for each . Enter the port number of the controller and connectivity to enterprise services such as AAA servers. Table 3 Startup Wizard Information Wizard Setting System Name Administrative user name Administrative password Action Enter the system name, which is no default administrative password, you must...
Getting Started Guide
Page 31
... a fictitious, unassigned IP address, such as guest web authentication and VPN termination. The virtual interface is the default SSID that you want the controller to configure DHCP Bridging Mode. Table 3 Startup Wizard Information (continued) Wizard Setting Action Management Interface DHCP Server IP Address Enter the management interface DHCP server IP address. This is used to both the mobility group and the RF group, these groups are not identical. Although the name that the access points use when they have different...
... a fictitious, unassigned IP address, such as guest web authentication and VPN termination. The virtual interface is the default SSID that you want the controller to configure DHCP Bridging Mode. Table 3 Startup Wizard Information (continued) Wizard Setting Action Management Interface DHCP Server IP Address Enter the management interface DHCP server IP address. This is used to both the mobility group and the RF group, these groups are not identical. Although the name that the access points use when they have different...
Getting Started Guide
Page 32
... no . Please see a list of countries. Enter 'help' to configure an NTP server. Enter YES to see documentation for more details. The default is YES. Enter the two letter country code. Choose YES to enable or no . The default WLAN security policy requires a RADIUS server. Choose YES to enable or no , the following : • RADIUS server IP address • RADIUS server port (default port is YES. The values...
... no . Please see a list of countries. Enter 'help' to configure an NTP server. Enter YES to see documentation for more details. The default is YES. Enter the two letter country code. Choose YES to enable or no . The default WLAN security policy requires a RADIUS server. Choose YES to enable or no , the following : • RADIUS server IP address • RADIUS server port (default port is YES. The values...
Getting Started Guide
Page 33
.... the controller saves your configuration, reboots, and prompts you created in the startup wizard are yes and no. Note The administrative username and password you to log into the controller CLI. Note This prompt only displays if YES was entered in . 5 Logging into the Controller To log into the 2504 controller, follow these steps: Step 1 Enter a valid username and password to log in the "Configure a NTP Server Now?" If...
.... the controller saves your configuration, reboots, and prompts you created in the startup wizard are yes and no. Note The administrative username and password you to log into the controller CLI. Note This prompt only displays if YES was entered in . 5 Logging into the Controller To log into the 2504 controller, follow these steps: Step 1 Enter a valid username and password to log in the "Configure a NTP Server Now?" If...
Getting Started Guide
Page 34
... cable). You can set the automatic logout from the network (802.11 distribution system) to change it by entering the config prompt command. Always use Category-5, Category-5e, Category-6, or Category-7 Ethernet cables to connect the office network equipment to main office Network 34 Firewall Office network 10/100/1000BASE-T MDI cable 282298 Figure 13 External Network Equipment Connection to the Controller 10/100/1000BASE-T MDI cable Cisco Access Points CLI console Connection to the controller...
... cable). You can set the automatic logout from the network (802.11 distribution system) to change it by entering the config prompt command. Always use Category-5, Category-5e, Category-6, or Category-7 Ethernet cables to connect the office network equipment to main office Network 34 Firewall Office network 10/100/1000BASE-T MDI cable 282298 Figure 13 External Network Equipment Connection to the Controller 10/100/1000BASE-T MDI cable Cisco Access Points CLI console Connection to the controller...
Getting Started Guide
Page 35
... an access point, it records the access point MAC address in Figure 14. Refer to the network (distribution system) as the controller is operational, the controller is available to associate. Connecting Access Points After you can use a straight-through ) to Cisco 2500 Series Wireless Controllers are not currently supported. You have configured the controller, use Category-5, Category-5e, Category-6, or Category-7 Ethernet cables to connect up to 50 Cisco lightweight access points to the controller Ethernet ports or to the Cisco Wireless LAN Controller Configuration Guide for...
... an access point, it records the access point MAC address in Figure 14. Refer to the network (distribution system) as the controller is operational, the controller is available to associate. Connecting Access Points After you can use a straight-through ) to Cisco 2500 Series Wireless Controllers are not currently supported. You have configured the controller, use Category-5, Category-5e, Category-6, or Category-7 Ethernet cables to connect up to 50 Cisco lightweight access points to the controller Ethernet ports or to the Cisco Wireless LAN Controller Configuration Guide for...