Презентации / 3_4_RADIUS_EAP_WLC
.pdf
Dynamic Interfaces
88
WLAN SSID <name>
WLAN 2 SSID <name>
WLAN 16 SSID <name>
Cisco WLAN Controller
Dynamic |
VLAN a |
Interface |
|
<name> |
|
Dynamic |
VLAN b |
Interface 2 |
|
<name> |
|
|
|
|
Cisco Gigabit Ethernet |
Dynamic |
VLAN n |
|
Switchport in 802.1q |
Interface n |
|
|
Trunk Mode |
<name> |
|
|
|
|
|
|
|
Virtual |
|
|
VLAN a |
|
|
|
|
Interface |
|
|
VLAN b |
|
|
|
|
AP Manager |
VLAN 0 |
|
VLAN n |
|
|
|
|
Interface |
|
|
VLAN x |
|
|
|
|
|
|
|
Native |
|
|
Port p |
VLAN |
|
|
|
|
Manager |
VLAN 0 |
|
|
|
|
|
|
Interface |
|
|
Cisco Copper 10/100 |
|
|
|
|
|
|
|
Ethernet Switchport in |
|
|
|
Access Mode |
Service port |
VLAN q |
|
|
|
|
|
|
Interface |
|
|
VLAN q |
Service
Port
89
90
Подключение ТД
§Установка легковесной прошивки Вариант 1 – CLI (консоль)
§capwap ap ip address <ip_address> <subnet mask> capwap ap ip default-gateway <gw_address> capwap ap controller ip address <wlc_mgmt_ip>
§ИЛИ
§capwap ap primary-base <controller_name> <wlc_mgmt_ip> capwap ap secondary-base <controller_name> <wlc_mgmt_ip>
Вариант 2 – DHCP
§ Настройка DHCP опции 43 – IP контроллера
Вариант 3 – DHCP + DNS
Разрешить одно из DNS имен:
CISCO-CAPWAP-CONTROLLER.local-domain
CISCO-LWAPP-CONTROLLER.local-domain
91
92
Этапы настройки
93
Настройка - Этап 1 (SETUP)
§Подключение по консоли
§Would you like to terminate autoinstall? [yes]: yes AUTO-INSTALL: process terminated -- no configuration loaded
Устанавливаем имя контроллеру (предлагаемое генерится из МАС-адреса), логин и пароль администратора:
System Name [Cisco_bb:bb:40] (31 characters max): wlc4.ххх.ххх.net Enter Administrative User Name (24 characters max): anton
Enter Administrative Password (3 to 24 characters): *********
Re-enter Administrative Password : *********
Management Interface IP Address: xx.xx.145.10 Management Interface Netmask: 255.255.255.128 Management Interface Default Router: xx.xx.145.1 Management Interface VLAN Identifier (0 = untagged): 310 Management Interface Port Num [1]:
Management Interface DHCP Server IP Address: xx.xx.145.9
§AP Manager Interface IP Address: xx.xx.145.14 AP-Manager is on Management subnet, using same values AP Manager Interface DHCP Server (xx.xx.145.9):
§Virtual Gateway IP Address: 1.1.1.1
94
Настройка – Этап 2 (SSID)
95
Настройка SSID
Interface определяет, на
какой проводной сетевой (саб- )интерфейс (VLAN)
контроллера по умолчанию будут терминироваться
подключения
беспроводных клиентов. Вы можете
создать несколько так называемых «динамических интерфейсов», каждый со своим VLAN ID
96
Настройка SSID
None WPA+WPA2 802.1X Static WEP
Static WEP + 802.1x
CKIP
No Layer 2 security selected.
Use this setting in order to enable Wi-Fi Protected Access.
Use this setting in order to enable 802.1x authentication.
Use this setting in order to enable Static WEP encryption.
Use this setting in order to enable both Static WEP and 802.1x parameters.
Use this setting in order to enable Cisco Key Integrity Protocol (CKIP). Functional on AP Models 1100, 1130, and 1200, but not AP 1000. Aironet IE needs to be enabled for this feature to work. CKIP expands the encryption keys to 16 bytes.
97