6-61
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 6 Configuring WLANsWireless Device Access
Configuring WLANs
Note To disable the quarantine VLAN on an interface, enter 0 for the VLAN ID.
Step 2 To enable or disable NAC out-of-band support for a WLAN or guest LAN, enter this command:
config {wlan | guest-lan} nac {enable | disable} {wlan_id | guest_lan_id}
Step 3 To enable or disable NAC out-of-band support for a specific access point group, enter this command:
config wlan apgroup nac {enable | disable} group_name wlan_id
Step 4 To save your changes, enter this command:
save config
Step 5 To see the configuration of a WLAN or guest LAN, including the NAC state, enter this command:
show {wlan wlan_ id | guest-lan guest_lan_id}
Information similar to the following appears:
WLAN Identifier.................................. 1
Profile Name..................................... wlan
Network Name (SSID).............................. wlan
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
NAC-State...................................... Enabled
Quarantine VLAN............................. 110
...
Step 6 To see the current state of the client (either Quarantine or Access), enter this command:
show client detailed client_mac
Information similar to the following appears:
Client’s NAC state.................................. QUARANTINE
Note The client state appears as “Invalid” if the client is probing, has not yet associated to a WLAN,
or cannot complete Layer 2 authentication.