Configuration Guide
Page 1
Cisco Wireless LAN Controller Configuration Guide Software Release 3.2 March 2006 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Text Part Number: OL-8335-02
Cisco Wireless LAN Controller Configuration Guide Software Release 3.2 March 2006 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Text Part Number: OL-8335-02
Configuration Guide
Page 2
... any other trademarks mentioned in this document or Website are registered trademarks of their respective owners. Cisco Wireless LAN Controller Configuration Guide Copyright © 2005-2006 Cisco Systems, Inc. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY ...
... any other trademarks mentioned in this document or Website are registered trademarks of their respective owners. Cisco Wireless LAN Controller Configuration Guide Copyright © 2005-2006 Cisco Systems, Inc. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY ...
Configuration Guide
Page 3
... Request xx Definitions of Service Request Severity xxi Obtaining Additional Publications and Information xxi Overview 1-1 Cisco Wireless LAN Solution Overview 1-2 Single-Controller Deployments 1-3 Multiple-Controller Deployments 1-4 Operating System Software 1-5 Operating System Security 1-5 Cisco WLAN Solution Wired Security 1-6 Layer 2 and Layer 3 LWAPP Operation 1-7 Operational Requirements 1-7 Configuration Requirements 1-7 Cisco Wireless LAN Controllers 1-7 Primary, Secondary, and Tertiary Controllers 1-8 CONTENTS OL-8335-02 Cisco Wireless LAN Controller Configuration Guide iii
... Request xx Definitions of Service Request Severity xxi Obtaining Additional Publications and Information xxi Overview 1-1 Cisco Wireless LAN Solution Overview 1-2 Single-Controller Deployments 1-3 Multiple-Controller Deployments 1-4 Operating System Software 1-5 Operating System Security 1-5 Cisco WLAN Solution Wired Security 1-6 Layer 2 and Layer 3 LWAPP Operation 1-7 Operational Requirements 1-7 Configuration Requirements 1-7 Cisco Wireless LAN Controllers 1-7 Primary, Secondary, and Tertiary Controllers 1-8 CONTENTS OL-8335-02 Cisco Wireless LAN Controller Configuration Guide iii
Configuration Guide
Page 9
... the Reset Button on Access Points Converted to Lightweight Mode 7-13 Configuring a Static IP Address on an Access Point Converted to Lightweight Mode 7-13 Managing Controller Software and Configurations 8-1 Transferring Files to and from a Controller 8-2 Upgrading Controller Software 8-2 Saving Configurations 8-4 Clearing the Controller Configuration 8-4 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide ix
... the Reset Button on Access Points Converted to Lightweight Mode 7-13 Configuring a Static IP Address on an Access Point Converted to Lightweight Mode 7-13 Managing Controller Software and Configurations 8-1 Transferring Files to and from a Controller 8-2 Upgrading Controller Software 8-2 Saving Configurations 8-4 Clearing the Controller Configuration 8-4 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide ix
Configuration Guide
Page 14
... Solution interfaces and describes the LED patterns on the controllers. Chapter 7, "Controlling Lightweight Access Points," explains how to connect access points to upgrade and manage controller software and configurations. Chapter 10, "Configuring Mobility Groups," describes mobility groups and explains how to set up and configure wireless LAN controllers. Cisco Wireless LAN Controller Configuration Guide xiv OL-8335-02 To use the...
... Solution interfaces and describes the LED patterns on the controllers. Chapter 7, "Controlling Lightweight Access Points," explains how to connect access points to upgrade and manage controller software and configurations. Chapter 10, "Configuring Mobility Groups," describes mobility groups and explains how to set up and configure wireless LAN controllers. Cisco Wireless LAN Controller Configuration Guide xiv OL-8335-02 To use the...
Configuration Guide
Page 18
...library of your comments. The DVD enables you have .PDF versions of installation, configuration, and command guides for Cisco hardware and software products. Certain products also have access to the same HTML documentation that appears with the technical documents on the... the online feedback form that is found on Cisco.com. to 5:00 p.m. (0800 to access multiple versions of the documentation available. xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 You can rate and provide feedback about Cisco documentation by using the response card (if present...
...library of your comments. The DVD enables you have .PDF versions of installation, configuration, and command guides for Cisco hardware and software products. Certain products also have access to the same HTML documentation that appears with the technical documents on the... the online feedback form that is found on Cisco.com. to 5:00 p.m. (0800 to access multiple versions of the documentation available. xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 You can rate and provide feedback about Cisco documentation by using the response card (if present...
Configuration Guide
Page 23
... sections: • Cisco Wireless LAN Solution Overview, page 1-2 • Operating System Software, page 1-5 • Operating System Security, page 1-5 • Layer 2 and Layer 3 LWAPP Operation, page 1-7 • Cisco Wireless LAN Controllers, page 1-7 • Client Roaming, page 1-8 • External DHCP Servers, page 1-10 • Cisco WLAN Solution Wired Connections, page 1-11 • Cisco WLAN Solution Wireless LANs, page 1-11 • Access Control Lists, page 1-12...
... sections: • Cisco Wireless LAN Solution Overview, page 1-2 • Operating System Software, page 1-5 • Operating System Security, page 1-5 • Layer 2 and Layer 3 LWAPP Operation, page 1-7 • Cisco Wireless LAN Controllers, page 1-7 • Client Roaming, page 1-8 • External DHCP Servers, page 1-10 • Cisco WLAN Solution Wired Connections, page 1-11 • Cisco WLAN Solution Wireless LANs, page 1-11 • Access Control Lists, page 1-12...
Configuration Guide
Page 27
... authentication protocol (EAP). • Wi-Fi protected access (WPA) dynamic keys. Chapter 1 Overview Figure 1-3 Typical Multi-Controller Deployment Operating System Software Operating System Software The operating system software controls Cisco Wireless LAN Controllers and Cisco 1000 Series Lightweight Access Points. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-5 Operating System Security Operating system security bundles Layer 1, Layer 2, and Layer 3 security components into a simple...
... authentication protocol (EAP). • Wi-Fi protected access (WPA) dynamic keys. Chapter 1 Overview Figure 1-3 Typical Multi-Controller Deployment Operating System Software Operating System Software The operating system software controls Cisco Wireless LAN Controllers and Cisco 1000 Series Lightweight Access Points. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-5 Operating System Security Operating system security bundles Layer 1, Layer 2, and Layer 3 security components into a simple...
Configuration Guide
Page 28
... client fails to that hackers do not download malicious code into any Cisco Wireless LAN Controller or Cisco 1000 series lightweight access point. Cisco Wireless LAN Controller Configuration Guide 1-6 OL-8335-02 Internet key exchange (IKE) - These...operating system software automatically blocks access to network services for your business-critical wireless LAN traffic. Message digest algorithm (MD5), or - However, for secure Cisco Wireless LAN Controller Service Interfaces, Cisco Wireless LAN Controller to access point, and inter-Cisco Wireless LAN Controller communications during...
... client fails to that hackers do not download malicious code into any Cisco Wireless LAN Controller or Cisco 1000 series lightweight access point. Cisco Wireless LAN Controller Configuration Guide 1-6 OL-8335-02 Internet key exchange (IKE) - These...operating system software automatically blocks access to network services for your business-critical wireless LAN traffic. Message digest algorithm (MD5), or - However, for secure Cisco Wireless LAN Controller Service Interfaces, Cisco Wireless LAN Controller to access point, and inter-Cisco Wireless LAN Controller communications during...
Configuration Guide
Page 29
... series lightweight access points can be connected through Layer 2 devices on ) and Layer 2 (bridged) protocols (such as the master controller while adding lightweight access points. Cisco Wireless LAN Controllers When you will defeat the Mobility software algorithm. This is supported for clients only) and Appletalk are on different subnets, these devices must configure a management interface to...
... series lightweight access points can be connected through Layer 2 devices on ) and Layer 2 (bridged) protocols (such as the master controller while adding lightweight access points. Cisco Wireless LAN Controllers When you will defeat the Mobility software algorithm. This is supported for clients only) and Appletalk are on different subnets, these devices must configure a management interface to...
Configuration Guide
Page 33
Using software release 3.2 and later you assign one or two fiber-optic Gigabit Ethernet cables, and the 4404 Wireless LAN Controller connects to the network using 10/100BASE-T Ethernet cables. Note Cisco recommends that controllers operate with each wireless LAN. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-11 The standard CAT-5 cable can control up to four fiber-optic Gigabit Ethernet cables...
Using software release 3.2 and later you assign one or two fiber-optic Gigabit Ethernet cables, and the 4404 Wireless LAN Controller connects to the network using 10/100BASE-T Ethernet cables. Note Cisco recommends that controllers operate with each wireless LAN. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-11 The standard CAT-5 cable can control up to four fiber-optic Gigabit Ethernet cables...
Configuration Guide
Page 35
.../ps6305/products_installation_and_configuration_guides_lis t.html OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-13 File Transfers The Cisco Wireless LAN Solution operator can upload and download operating system code, configuration, and certificate files to and from a Controller" section on page 8-2. • To use Cisco WCS to upgrade software, refer to this URL to browse to the Cisco Wireless Control System Configuration Guide. To assign...
.../ps6305/products_installation_and_configuration_guides_lis t.html OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-13 File Transfers The Cisco Wireless LAN Solution operator can upload and download operating system code, configuration, and certificate files to and from a Controller" section on page 8-2. • To use Cisco WCS to upgrade software, refer to this URL to browse to the Cisco Wireless Control System Configuration Guide. To assign...
Configuration Guide
Page 41
...RADIUS server IP address, communication port, and Secret. • Collects the Country Code. Startup Wizard When an Cisco Wireless LAN Controller is also available: • AIR-PWR-4400-AC - Yes = more convenient, but lower security (session can communicate with the network (802...for initial configuration. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-19 The following power supply module is powered up to 24 characters. • Ensures that the Cisco Wireless LAN Controller can communicate with a new factory operating system software load or after being reset to factory...
...RADIUS server IP address, communication port, and Secret. • Collects the Country Code. Startup Wizard When an Cisco Wireless LAN Controller is also available: • AIR-PWR-4400-AC - Yes = more convenient, but lower security (session can communicate with the network (802...for initial configuration. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 1-19 The following power supply module is powered up to 24 characters. • Ensures that the Cisco Wireless LAN Controller can communicate with a new factory operating system software load or after being reset to factory...
Configuration Guide
Page 60
...of the port are located on the router backplane. Note The Cisco WiSM's 4404 controllers use the correct straight-through or crossover Ethernet cable to six access points. Cisco Wireless LAN Controller Configuration Guide 3-4 OL-8335-02 Note Some controllers support link aggregation (LAG), which are not configurable. Overview ...have a service port. The service port is , by the service-port interface and is not auto-sensing. Cisco 4400 series controllers support LAG in software release 3.2 and higher, and LAG is in the event of carrying 802.1Q tags, so it must use...
...of the port are located on the router backplane. Note The Cisco WiSM's 4404 controllers use the correct straight-through or crossover Ethernet cable to six access points. Cisco Wireless LAN Controller Configuration Guide 3-4 OL-8335-02 Note Some controllers support link aggregation (LAG), which are not configurable. Overview ...have a service port. The service port is , by the service-port interface and is not auto-sensing. Cisco 4400 series controllers support LAG in software release 3.2 and higher, and LAG is in the event of carrying 802.1Q tags, so it must use...
Configuration Guide
Page 83
... detects logical network loops, places redundant ports on the Cisco WiSM controllers. Figure 3-11 illustrates LAG. Cisco 4400 series controllers support LAG in software release 3.2 and higher, and LAG is enabled, the system dynamically manages port redundancy and load balances access points transparently to verify that your controller. Cisco Wireless LAN Controller Configuration Guide 3-27 Enabling Link Aggregation Link aggregation...
... detects logical network loops, places redundant ports on the Cisco WiSM controllers. Figure 3-11 illustrates LAG. Cisco 4400 series controllers support LAG in software release 3.2 and higher, and LAG is enabled, the system dynamically manages port redundancy and load balances access points transparently to verify that your controller. Cisco Wireless LAN Controller Configuration Guide 3-27 Enabling Link Aggregation Link aggregation...
Configuration Guide
Page 100
... up to 31 alphanumeric characters for the location. Use the show snmptrap commands to verify that run Cisco IOS software, this command to disable or enable DTPC: config {802.11a | 802.11bg} dtpc {enable | disable} Cisco Wireless LAN Controller Configuration Guide 4-8 OL-8335-02 If necessary, use the config trapflags commands to disable traps. Enabling Dynamic...
... up to 31 alphanumeric characters for the location. Use the show snmptrap commands to verify that run Cisco IOS software, this command to disable or enable DTPC: config {802.11a | 802.11bg} dtpc {enable | disable} Cisco Wireless LAN Controller Configuration Guide 4-8 OL-8335-02 If necessary, use the config trapflags commands to disable traps. Enabling Dynamic...
Configuration Guide
Page 143
... Lightweight Access Point Quick Start Guide for Controller Discovery In Cisco Wireless LAN Solution software releases 3.0 and later, access points can discover controllers through your DNS to return controller IP addresses in response to the Internal-Antenna AP1010 Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access...configure your domain name server (DNS). Note that the AIR-PWR-1000 external power supply can be enabled for Controller Discovery Cisco 1000 Series Lightweight Access Point External Power Supply The Cisco 1000 series lightweight access point can perform rogue access point ...
... Lightweight Access Point Quick Start Guide for Controller Discovery In Cisco Wireless LAN Solution software releases 3.0 and later, access points can discover controllers through your DNS to return controller IP addresses in response to the Internal-Antenna AP1010 Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access...configure your domain name server (DNS). Note that the AIR-PWR-1000 external power supply can be enabled for Controller Discovery Cisco 1000 Series Lightweight Access Point External Power Supply The Cisco 1000 series lightweight access point can perform rogue access point ...
Configuration Guide
Page 145
... can convert the access point from the controller. Converted access points communicate only with Cisco wireless LAN controllers and cannot communicate with a wireless LAN controller and receives a configuration and software image from a lightweight unit back to ...2006, 4400, and WiSM controllers only. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 7-9 Cisco 4100 series, Airespace 4012 series, and Airespace 4024 series controllers are pushed to the access point. • Access points converted to a controller, you upgrade one of 8 wireless LANs per access point. (Cisco...
... can convert the access point from the controller. Converted access points communicate only with Cisco wireless LAN controllers and cannot communicate with a wireless LAN controller and receives a configuration and software image from a lightweight unit back to ...2006, 4400, and WiSM controllers only. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 7-9 Cisco 4100 series, Airespace 4012 series, and Airespace 4024 series controllers are pushed to the access point. • Access points converted to a controller, you upgrade one of 8 wireless LANs per access point. (Cisco...
Configuration Guide
Page 146
...to a Previous Release Follow these steps to revert from lightweight mode to autonomous mode using a wireless LAN controller: Step 1 Step 2 Step 3 Log into the CLI on the controller to which your TFTP server software runs must be configured with a static IP address in the TFTP server folder and that ... to revert from the access point. After the access point reboots, reconfigure the access point using the GUI or the CLI. 7-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Step 7 Step 8 Step 9 Hold the MODE button until the access point reboots as indicated by all LEDs...
...to a Previous Release Follow these steps to revert from lightweight mode to autonomous mode using a wireless LAN controller: Step 1 Step 2 Step 3 Log into the CLI on the controller to which your TFTP server software runs must be configured with a static IP address in the TFTP server folder and that ... to revert from the access point. After the access point reboots, reconfigure the access point using the GUI or the CLI. 7-10 Cisco Wireless LAN Controller Configuration Guide OL-8335-02 Step 7 Step 8 Step 9 Hold the MODE button until the access point reboots as indicated by all LEDs...
Configuration Guide
Page 147
...). You can send any debug command supported by Cisco Aironet access points that run Cisco IOS software in lightweight mode. Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Controllers Accept SSCs from Access Points Converted to Lightweight Mode...provisioning of the X.509 certificates. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 7-11 Using a Controller to Send Debug Commands to Access Points Converted to Lightweight Mode Enter this command to enable the controller to send debug commands to an access point ...
...). You can send any debug command supported by Cisco Aironet access points that run Cisco IOS software in lightweight mode. Chapter 7 Controlling Lightweight Access Points Autonomous Access Points Converted to Lightweight Mode Controllers Accept SSCs from Access Points Converted to Lightweight Mode...provisioning of the X.509 certificates. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide 7-11 Using a Controller to Send Debug Commands to Access Points Converted to Lightweight Mode Enter this command to enable the controller to send debug commands to an access point ...