Configuration Guide
Page 1
Cisco Wireless LAN Controller Configuration Guide Software Release 3.2 March 2006 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Text Part Number: OL-8335-02
Cisco Wireless LAN Controller Configuration Guide Software Release 3.2 March 2006 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Text Part Number: OL-8335-02
Configuration Guide
Page 2
...Increase Your Internet Quotient, and TransPath are the property of Cisco Systems, Inc. The Cisco implementation of California. Cisco Wireless LAN Controller Configuration Guide Copyright © 2005-2006 Cisco Systems, Inc. THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS ..., Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, ...
...Increase Your Internet Quotient, and TransPath are the property of Cisco Systems, Inc. The Cisco implementation of California. Cisco Wireless LAN Controller Configuration Guide Copyright © 2005-2006 Cisco Systems, Inc. THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS ..., Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, ...
Configuration Guide
Page 3
... xx Definitions of Service Request Severity xxi Obtaining Additional Publications and Information xxi Overview 1-1 Cisco Wireless LAN Solution Overview 1-2 Single-Controller Deployments 1-3 Multiple-Controller Deployments 1-4 Operating System Software 1-5 Operating System Security 1-5 Cisco WLAN Solution Wired Security 1-6 Layer 2 and Layer 3 LWAPP Operation 1-7 Operational Requirements 1-7 Configuration Requirements 1-7 Cisco Wireless LAN Controllers 1-7 Primary, Secondary, and Tertiary Controllers 1-8 CONTENTS OL-8335-02 Cisco Wireless LAN Controller Configuration Guide iii
... xx Definitions of Service Request Severity xxi Obtaining Additional Publications and Information xxi Overview 1-1 Cisco Wireless LAN Solution Overview 1-2 Single-Controller Deployments 1-3 Multiple-Controller Deployments 1-4 Operating System Software 1-5 Operating System Security 1-5 Cisco WLAN Solution Wired Security 1-6 Layer 2 and Layer 3 LWAPP Operation 1-7 Operational Requirements 1-7 Configuration Requirements 1-7 Cisco Wireless LAN Controllers 1-7 Primary, Secondary, and Tertiary Controllers 1-8 CONTENTS OL-8335-02 Cisco Wireless LAN Controller Configuration Guide iii
Configuration Guide
Page 4
... (IDS) 1-15 Wireless LAN Controller Platforms 1-15 Cisco 2000 Series Wireless LAN Controllers 1-16 Cisco 4100 Series Wireless LAN Controllers 1-16 Cisco 4400 Series Wireless LAN Controllers 1-17 Cisco 2000 Series Wireless LAN Controller Model Numbers 1-17 Cisco 4100 Series Wireless LAN Controller Model Numbers 1-18 Cisco 4400 Series Wireless LAN Controller Model Numbers 1-18 Startup Wizard 1-19 Cisco Wireless LAN Controller Memory 1-20 Cisco Wireless LAN Controller Failover Protection 1-20 Cisco Wireless LAN Controller Automatic Time Setting 1-21 Cisco Wireless LAN Controller Time Zones 1-21...
... (IDS) 1-15 Wireless LAN Controller Platforms 1-15 Cisco 2000 Series Wireless LAN Controllers 1-16 Cisco 4100 Series Wireless LAN Controllers 1-16 Cisco 4400 Series Wireless LAN Controllers 1-17 Cisco 2000 Series Wireless LAN Controller Model Numbers 1-17 Cisco 4100 Series Wireless LAN Controller Model Numbers 1-18 Cisco 4400 Series Wireless LAN Controller Model Numbers 1-18 Startup Wizard 1-19 Cisco Wireless LAN Controller Memory 1-20 Cisco Wireless LAN Controller Failover Protection 1-20 Cisco Wireless LAN Controller Automatic Time Setting 1-21 Cisco Wireless LAN Controller Time Zones 1-21...
Configuration Guide
Page 5
...2-5 Using the CLI 2-5 Logging into the CLI 2-5 Using a Local Serial Connection 2-6 Using a Remote Ethernet Connection 2-6 Logging Out of the CLI 2-7 Navigating the CLI 2-7 Enabling Wireless Connections to the Web-Browser and CLI Interfaces 2-8 Configuring Ports and Interfaces 3-1 Overview of Ports and Interfaces 3-2 Ports 3-2 Distribution System Ports 3-3 Service Port 3-4 Interfaces 3-5 Management..., and Service-Port Interfaces 3-12 Using the CLI to Configure the Management Interface 3-12 Using the CLI to Configure the AP-Manager Interface 3-12 Cisco Wireless LAN Controller Configuration Guide v
...2-5 Using the CLI 2-5 Logging into the CLI 2-5 Using a Local Serial Connection 2-6 Using a Remote Ethernet Connection 2-6 Logging Out of the CLI 2-7 Navigating the CLI 2-7 Enabling Wireless Connections to the Web-Browser and CLI Interfaces 2-8 Configuring Ports and Interfaces 3-1 Overview of Ports and Interfaces 3-2 Ports 3-2 Distribution System Ports 3-3 Service Port 3-4 Interfaces 3-5 Management..., and Service-Port Interfaces 3-12 Using the CLI to Configure the Management Interface 3-12 Using the CLI to Configure the AP-Manager Interface 3-12 Cisco Wireless LAN Controller Configuration Guide v
Configuration Guide
Page 6
... Aggregation 3-29 Using the CLI to Enable Link Aggregation 3-30 Configuring Neighbor Devices to Support LAG 3-30 Configuring a 4400 Series Controller to Support More Than 48 Access Points 3-30 Using Link Aggregation 3-31 Using Multiple AP-Manager Interfaces 3-31 Connecting Additional Ports 3-36 4... 4-6 Configuring Administrator Usernames and Passwords 4-7 Configuring RADIUS Settings 4-7 Configuring SNMP Settings 4-7 Enabling 802.3x Flow Control 4-8 Enabling System Logging 4-8 Enabling Dynamic Transmit Power Control 4-8 Cisco Wireless LAN Controller Configuration Guide vi OL-8335-02
... Aggregation 3-29 Using the CLI to Enable Link Aggregation 3-30 Configuring Neighbor Devices to Support LAG 3-30 Configuring a 4400 Series Controller to Support More Than 48 Access Points 3-30 Using Link Aggregation 3-31 Using Multiple AP-Manager Interfaces 3-31 Connecting Additional Ports 3-36 4... 4-6 Configuring Administrator Usernames and Passwords 4-7 Configuring RADIUS Settings 4-7 Configuring SNMP Settings 4-7 Enabling 802.3x Flow Control 4-8 Enabling System Logging 4-8 Enabling Dynamic Transmit Power Control 4-8 Cisco Wireless LAN Controller Configuration Guide vi OL-8335-02
Configuration Guide
Page 7
... Multicast Mode 4-10 Configuring the Supervisor 720 to Support the WiSM 4-10 General WiSM Guidelines 4-10 Configuring the Supervisor 4-11 Using the Wireless LAN Controller Network Module 4-12 Configuring Security Solutions 5-1 Cisco WLAN Solution Security 5-2 Security Overview 5-2 Layer 1 Solutions 5-2 Layer 2 Solutions 5-2 Layer 3 Solutions 5-3 Rogue Access Point Solutions 5-3 Rogue Access Point Challenges 5-3 Tagging and Containing...
... Multicast Mode 4-10 Configuring the Supervisor 720 to Support the WiSM 4-10 General WiSM Guidelines 4-10 Configuring the Supervisor 4-11 Using the Wireless LAN Controller Network Module 4-12 Configuring Security Solutions 5-1 Cisco WLAN Solution Security 5-2 Security Overview 5-2 Layer 1 Solutions 5-2 Layer 2 Solutions 5-2 Layer 3 Solutions 5-3 Rogue Access Point Solutions 5-3 Rogue Access Point Challenges 5-3 Tagging and Containing...
Configuration Guide
Page 8
... Encryption 6-5 Configuring a Wireless LAN for Both Static and Dynamic WEP 6-6 Configuring Layer 3 Security 6-6 IPSec 6-6 IPSec Authentication 6-6 IPSec Encryption 6-6 IKE Authentication 6-7 IKE Diffie-Hellman Group 6-7 IKE Phase 1 Aggressive and Main Modes 6-7 IKE Lifetime Timeout 6-7 IPSec Passthrough 6-8 Web-Based Authentication 6-8 Local Netuser 6-8 Configuring Quality of Service 6-8 Configuring QoS Enhanced BSS (QBSS) 6-9 Cisco Wireless LAN Controller Configuration Guide viii...
... Encryption 6-5 Configuring a Wireless LAN for Both Static and Dynamic WEP 6-6 Configuring Layer 3 Security 6-6 IPSec 6-6 IPSec Authentication 6-6 IPSec Encryption 6-6 IKE Authentication 6-7 IKE Diffie-Hellman Group 6-7 IKE Phase 1 Aggressive and Main Modes 6-7 IKE Lifetime Timeout 6-7 IPSec Passthrough 6-8 Web-Based Authentication 6-8 Local Netuser 6-8 Configuring Quality of Service 6-8 Configuring QoS Enhanced BSS (QBSS) 6-9 Cisco Wireless LAN Controller Configuration Guide viii...
Configuration Guide
Page 9
... the Reset Button on Access Points Converted to Lightweight Mode 7-13 Configuring a Static IP Address on an Access Point Converted to Lightweight Mode 7-13 Managing Controller Software and Configurations 8-1 Transferring Files to and from a Controller 8-2 Upgrading Controller Software 8-2 Saving Configurations 8-4 Clearing the Controller Configuration 8-4 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide ix
... the Reset Button on Access Points Converted to Lightweight Mode 7-13 Configuring a Static IP Address on an Access Point Converted to Lightweight Mode 7-13 Managing Controller Software and Configurations 8-1 Transferring Files to and from a Controller 8-2 Upgrading Controller Software 8-2 Saving Configurations 8-4 Clearing the Controller Configuration 8-4 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide ix
Configuration Guide
Page 10
... Radio Resource Management 9-1 Overview of Radio Resource Management 9-2 Radio Resource Monitoring 9-2 Dynamic Channel Assignment 9-3 Dynamic Transmit Power Control 9-4 Coverage Hole Detection and Correction 9-4 Client and Network Load Balancing 9-4 RRM Benefits 9-5 Overview of RF Groups 9-5 RF ... and Power Assignment Globally for a Controller 9-27 Using the GUI to Disable Dynamic Channel and Power Assignment 9-27 Using the CLI to Disable Dynamic Channel and Power Assignment 9-27 Viewing Additional RRM Settings Using the CLI 9-28 Cisco Wireless LAN Controller Configuration Guide x OL-8335-02
... Radio Resource Management 9-1 Overview of Radio Resource Management 9-2 Radio Resource Monitoring 9-2 Dynamic Channel Assignment 9-3 Dynamic Transmit Power Control 9-4 Coverage Hole Detection and Correction 9-4 Client and Network Load Balancing 9-4 RRM Benefits 9-5 Overview of RF Groups 9-5 RF ... and Power Assignment Globally for a Controller 9-27 Using the GUI to Disable Dynamic Channel and Power Assignment 9-27 Using the CLI to Disable Dynamic Channel and Power Assignment 9-27 Viewing Additional RRM Settings Using the CLI 9-28 Cisco Wireless LAN Controller Configuration Guide x OL-8335-02
Configuration Guide
Page 11
...Warning for Rack-Mounting and Servicing A-9 Battery Handling Warning for 4400 Series Controllers A-18 Equipment Installation Warning A-20 More Than One Power Supply Warning for 4400 Series Controllers A-23 Declarations of Conformity and Regulatory Information B-1 Regulatory Information for 1000... Guidelines for Operating Cisco Aironet Access Points in Japan B-6 Administrative Rules for Cisco Aironet Access Points in Taiwan B-7 Access Points with IEEE 802.11a Radios B-7 All Access Points B-7 Declaration of Conformity Statements B-8 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xi
...Warning for Rack-Mounting and Servicing A-9 Battery Handling Warning for 4400 Series Controllers A-18 Equipment Installation Warning A-20 More Than One Power Supply Warning for 4400 Series Controllers A-23 Declarations of Conformity and Regulatory Information B-1 Regulatory Information for 1000... Guidelines for Operating Cisco Aironet Access Points in Japan B-6 Administrative Rules for Cisco Aironet Access Points in Taiwan B-7 Access Points with IEEE 802.11a Radios B-7 All Access Points B-7 Declaration of Conformity Statements B-8 OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xi
Configuration Guide
Page 12
Contents C A P P E N D I X D A P P E N D I X INDEX FCC Statements for Cisco 2000 Series Wireless LAN Controllers B-8 FCC Statements for Cisco 4100 Series Wireless LAN Controllers and Cisco 4400 Series Wireless LAN Controllers B-9 End User License and Warranty C-1 End User License Agreement C-2 Limited Warranty C-4 Disclaimer of Warranty C-6 General Terms Applicable to the Limited... D-2 Using Client Reason and Status Codes in Trap Logs D-4 Client Reason Codes D-4 Client Status Codes D-5 Using Lightweight Access Point LEDs D-6 Cisco Wireless LAN Controller Configuration Guide xii OL-8335-02
Contents C A P P E N D I X D A P P E N D I X INDEX FCC Statements for Cisco 2000 Series Wireless LAN Controllers B-8 FCC Statements for Cisco 4100 Series Wireless LAN Controllers and Cisco 4400 Series Wireless LAN Controllers B-9 End User License and Warranty C-1 End User License Agreement C-2 Limited Warranty C-4 Disclaimer of Warranty C-6 General Terms Applicable to the Limited... D-2 Using Client Reason and Status Codes in Trap Logs D-4 Client Reason Codes D-4 Client Status Codes D-5 Using Lightweight Access Point LEDs D-6 Cisco Wireless LAN Controller Configuration Guide xii OL-8335-02
Configuration Guide
Page 13
..., page xix • Obtaining Technical Assistance, page xx • Obtaining Additional Publications and Information, page xxi OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xiii Preface This preface provides an overview of the Cisco Wireless LAN Controller Configuration Guide (OL-8335-02), references related publications, and explains how to obtain other documentation and technical assistance, if necessary.
..., page xix • Obtaining Technical Assistance, page xx • Obtaining Additional Publications and Information, page xxi OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xiii Preface This preface provides an overview of the Cisco Wireless LAN Controller Configuration Guide (OL-8335-02), references related publications, and explains how to obtain other documentation and technical assistance, if necessary.
Configuration Guide
Page 14
...," provides an overview of the network roles and features of wireless LANs. Cisco Wireless LAN Controller Configuration Guide xiv OL-8335-02 Chapter 4, "Configuring Controller Settings," describes how to set up and configure wireless LAN controllers. Audience Preface Audience This guide describes Cisco Wireless LAN Controllers and Cisco Lightweight Access Points. To use the controller GUI and CLI. Purpose This guide provides the information you should...
...," provides an overview of the network roles and features of wireless LANs. Cisco Wireless LAN Controller Configuration Guide xiv OL-8335-02 Chapter 4, "Configuring Controller Settings," describes how to set up and configure wireless LAN controllers. Audience Preface Audience This guide describes Cisco Wireless LAN Controllers and Cisco Lightweight Access Points. To use the controller GUI and CLI. Purpose This guide provides the information you should...
Configuration Guide
Page 15
... damage or loss of the warnings that appear in deze publicatie verschijnen, kunt u het aanhangsel "Translated Safety Warnings" (Vertalingen van veiligheidsvoorschriften) raadplegen.) OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xv Preface Conventions Conventions This publication uses these conventions to convey instructions and information: Command descriptions use these conventions: • Commands and keywords...
... damage or loss of the warnings that appear in deze publicatie verschijnen, kunt u het aanhangsel "Translated Safety Warnings" (Vertalingen van veiligheidsvoorschriften) raadplegen.) OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xv Preface Conventions Conventions This publication uses these conventions to convey instructions and information: Command descriptions use these conventions: • Commands and keywords...
Configuration Guide
Page 17
...; Cisco Wireless LAN Controller Command Reference • Quick Start Guide: Cisco 2000 Series Wireless LAN Controllers • Quick Start Guide: Cisco 4100 Series Wireless LAN Controllers • Quick Start Guide: Cisco 4400 Series Wireless LAN Controllers • Quick Start Guide: VPN Termination Module for Cisco 4400 Series Wireless LAN Controllers • Quick Start Guide: VPN/Enhanced Security Modules for Cisco 4100 Series Wireless LAN Controllers • Cisco Wireless Control System Configuration Guide • Quick Start Guide: Cisco Wireless Control System...
...; Cisco Wireless LAN Controller Command Reference • Quick Start Guide: Cisco 2000 Series Wireless LAN Controllers • Quick Start Guide: Cisco 4100 Series Wireless LAN Controllers • Quick Start Guide: Cisco 4400 Series Wireless LAN Controllers • Quick Start Guide: VPN Termination Module for Cisco 4400 Series Wireless LAN Controllers • Quick Start Guide: VPN/Enhanced Security Modules for Cisco 4100 Series Wireless LAN Controllers • Cisco Wireless Control System Configuration Guide • Quick Start Guide: Cisco Wireless Control System...
Configuration Guide
Page 18
... Product Documentation DVD (product number DOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at this URL: http://www.cisco.com/go /marketplace/ Ordering Documentation Registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the United States and Canada, or ... can also order documentation by e-mail at tech-doc-store-mkpl@external.cisco.com or by using the response card (if present) behind the front cover of your comments. xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 You can order technical documentation from 8:00...
... Product Documentation DVD (product number DOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at this URL: http://www.cisco.com/go /marketplace/ Ordering Documentation Registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the United States and Canada, or ... can also order documentation by e-mail at tech-doc-store-mkpl@external.cisco.com or by using the response card (if present) behind the front cover of your comments. xviii Cisco Wireless LAN Controller Configuration Guide OL-8335-02 You can order technical documentation from 8:00...
Configuration Guide
Page 19
... correct public key to the PSIRT RSS feed is found at this URL: http://www.cisco.com/en/US/products/products_psirt_rss_feed.html Reporting Security Problems in Cisco products. • Obtain assistance with PGP versions 2.x through 9.x. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xix A current list of security advisories, security notices, and security responses for...
... correct public key to the PSIRT RSS feed is found at this URL: http://www.cisco.com/en/US/products/products_psirt_rss_feed.html Reporting Security Problems in Cisco products. • Obtain assistance with PGP versions 2.x through 9.x. OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xix A current list of security advisories, security notices, and security responses for...
Configuration Guide
Page 20
...online support resources. by product ID or model name; If your issue is assigned to locate your business operations running smoothly. Cisco Wireless LAN Controller Configuration Guide xx OL-8335-02 Submitting a Service Request Using the online TAC Service Request Tool is minimally impaired or for certain.... (S3 and S4 service requests are assigned immediately to S1 and S2 service requests to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you do not have a user ID or password, you describe your reseller....
...online support resources. by product ID or model name; If your issue is assigned to locate your business operations running smoothly. Cisco Wireless LAN Controller Configuration Guide xx OL-8335-02 Submitting a Service Request Using the online TAC Service Request Tool is minimally impaired or for certain.... (S3 and S4 service requests are assigned immediately to S1 and S2 service requests to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you do not have a user ID or password, you describe your reseller....
Configuration Guide
Page 21
... impact to this URL: http://www.ciscopress.com OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xxi For current Cisco Press titles and other information, go to satisfactory levels. You and Cisco will commit all service requests are sold through channel partners. You and Cisco will commit resources during normal business hours to this URL: http...
... impact to this URL: http://www.ciscopress.com OL-8335-02 Cisco Wireless LAN Controller Configuration Guide xxi For current Cisco Press titles and other information, go to satisfactory levels. You and Cisco will commit all service requests are sold through channel partners. You and Cisco will commit resources during normal business hours to this URL: http...