Cisco SD2008T-NA - Chapter 5 Configuring Security Solutions

To Next Page

To Previous Page

CHAPTER

5-1

Cisco Wireless LAN Controller Configuration Guide

OL-9141-03

Configuring Security Solutions

This chapter describes security solutions for wireless LANs. It contains these sections:

• Cisco UWN Solution Security, page 5-2

• Configuring the System for SpectraLink NetLink Telephones, page 5-4

• Using Management over Wireless, page 5-6

• Configuring DHCP Option 82, page 5-7

• Configuring Access Control Lists, page 5-8

• Configuring Management Frame Protection, page 5-13

• Configuring Identity Networking, page 5-20

• Configuring IDS, page 5-26

• Configuring AES Key Wrap, page 5-39

• Configuring Maximum Local Database Entries, page 5-41

Main Page

Default Chapter3
- Table of Contents3
Preface17
- Audience18
- Organization18
- Purpose18
- Conventions19
- Related Publications21
- Obtaining Documentation22
  - Cisco.com22
Chapter 1 Overview24
- Cisco Unified Wireless Network Solution Overview25
  - Single-Controller Deployments26
  - Multiple-Controller Deployments27
- Operating System Software28
- Layer 2 and Layer 3 LWAPP Operation29
  - Operational Requirements29
  - Configuration Requirements29
- Cisco Wireless LAN Controllers29
  - Primary, Secondary, and Tertiary Controllers30
  - Client Location30
- Controller Platforms31
- Cisco UWN Solution Wired Connections33
- Cisco UWN Solution Wlans34
- Identity Networking34
  - Enhanced Integration with Cisco Secure ACS35
- File Transfers36
- Power over Ethernet36
- Pico Cell Functionality36
- Rogue Access Points41
  - Rogue Access Point Location, Tagging, and Containment41
CHAPTER 2 Using the Web-Browser and CLI Interfaces44
- Using the Web-Browser Interface44
- Enabling Web and Secure Web Modes45
- Using the CLI47
- Enabling Wireless Connections to the Web-Browser and CLI Interfaces51
CHAPTER 3 Configuring Ports and Interfaces154
- Overview of Ports and Interfaces54
- Configuring the Management, AP-Manager, Virtual, and Service-Port Interfaces62
  - Using the GUI to Configure the Management, AP-Manager, Virtual, and Service-Port Interfaces62
  - Using the CLI to Configure the Management, AP-Manager, Virtual, and Service-Port Interfaces64
- Configuring Dynamic Interfaces67
- Configuring Ports71
  - Configuring Port Mirroring74
  - Configuring Spanning Tree Protocol75
    - Using the GUI to Configure Spanning Tree Protocol76
    - Using the CLI to Configure Spanning Tree Protocol80
- Enabling Link Aggregation81
- Configuring a 4400 Series Controller to Support more than 48 Access Points88
CHAPTER 4 Configuring Controller Settingswireless Device Access196
- Using the Configuration Wizard96
- Managing the System Time and Date99
  - Configuring the Time and Date Manually99
  - Configuring an NTP Server99
- Configuring a Country Code100
- Enabling and Disabling 802.11 Bands101
- Configuring Administrator Usernames and Passwords101
- Configuring RADIUS Settings102
- Configuring SNMP102
- Changing the Default Values of SNMP Community Strings103
  - Using the GUI to Change the SNMP Community String Default Values103
  - Using the CLI to Change the SNMP Community String Default Values105
- Changing the Default Values for SNMP V3 Users105
  - Using the GUI to Change the SNMP V3 User Default Values106
  - Using the CLI to Change the SNMP V3 User Default Values107
- Enabling 802.3X Flow Control107
- Enabling System Logging107
  - Using the GUI to Enable System Logging107
  - Using the CLI to Enable System Logging109
- Enabling Dynamic Transmit Power Control110
- Configuring Multicast Mode110
- Configuring Client Roaming111
- Configuring Voice and Video Parameters116
- Using the Wireless LAN Controller Network Module129
CHAPTER 5 Configuring Security Solutions1132
- Cisco UWN Solution Security132
- Configuring the System for Spectralink Netlink Telephones134
- Using Management over Wireless136
  - Using the GUI to Enable Management over Wireless136
  - Using the CLI to Enable Management over Wireless137
- Configuring DHCP Option 82137
- Configuring Access Control Lists138
  - Using the GUI to Configure Access Control Lists139
  - Using the CLI to Configure Access Control Lists142
- Configuring Management Frame Protection143
- Configuring Identity Networking150
- Configuring IDS156
  - Configuring IDS Sensors156
  - Configuring IDS Signatures160
- Configuring AES Key Wrap169
  - Using the GUI to Configure AES Key Wrap169
  - Using the CLI to Configure AES Key Wrap170
- Configuring Maximum Local Database Entries171
  - Using the GUI to Specify the Maximum Number of Local Database Entries171
  - Using the CLI to Specify the Maximum Number of Local Database Entries171
Chapter 6 Configuring Wlanswireless Device Access173
- WLAN Overview174
- Configuring Wlans175
- Configuring MAC Filtering for Wlans178
- Assigning Wlans to Vlans178
- Configuring Layer 2 Security179
- Ckip184
CHAPTER 7 Controlling Lightweight Access Points1210
- The Controller Discovery Process210
  - C H a P T E R 7 Controlling Lightweight Access Points210
  - Verifying that Access Points Join the Controller211
    - Verifying that Access Points Join the Controller Using the GUI211
    - Verifying that Access Points Join the Controller Using the CLI211
- Cisco 1000 Series Lightweight Access Points212
- Cisco Aironet 1510 Series Lightweight Outdoor Mesh Access Points217
  - Wireless Mesh218
  - Configuring and Deploying the AP1510219
- Autonomous Access Points Converted to Lightweight Mode227
- Dynamic Frequency Selection232
- Retrieving the Unique Device Identifier on Controllers and Access Points233
  - Using the GUI to Retrieve the Unique Device Identifier on Controllers and Access Points234
  - Using the CLI to Retrieve the Unique Device Identifier on Controllers and Access Points235
- Performing a Link Test235
  - Using the GUI to Perform a Link Test237
  - Using the CLI to Perform a Link Test238
- Configuring Cisco Discovery Protocol239
- Configuring Power over Ethernet241
  - Using the GUI to Configure Power over Ethernet241
  - Using the CLI to Configure Power over Ethernet243
- Configuring Flashing Leds244
- Authorizing Access Points Using Mics244
CHAPTER 8 Managing Controller Software and Configurations246
- Transferring Files to and from a Controller246
- Upgrading Controller Software246
  - C H a P T E R 8 Managing Controller Software and Configurations246
  - Updating Controller Software247
- Saving Configurations248
- Clearing the Controller Configuration249
- Erasing the Controller Configuration249
- Resetting the Controller249
Chapter 9 Managing User Accounts251
- Creating Guest User Accounts252
- Web Authentication Process257
- Choosing the Web Authentication Login Window259
CHAPTER 10 Configuring Radio Resource Managementwireless Device Access270
- Overview of Radio Resource Management270
- Overview of RF Groups273
  - RF Group Leader273
  - RF Group Name274
- Configuring an RF Group274
  - Using the GUI to Configure an RF Group275
  - Using the CLI to Configure RF Groups276
- Viewing RF Group Status276
  - Using the GUI to View RF Group Status276
  - Using the CLI to View RF Group Status279
- Enabling Rogue Access Point Detection280
  - Using the GUI to Enable Rogue Access Point Detection280
  - Using the CLI to Enable Rogue Access Point Detection282
- Configuring Dynamic RRM283
- Overriding Dynamic RRM291
  - Statically Assigning Channel and Transmit Power Settings to Access Point Radios292
    - Using the GUI to Statically Assign Channel and Transmit Power Settings292
    - Using the CLI to Statically Assign Channel and Transmit Power Settings294
  - Disabling Dynamic Channel and Power Assignment Globally for a Controller295
    - Using the GUI to Disable Dynamic Channel and Power Assignment295
    - Using the CLI to Disable Dynamic Channel and Power Assignment295
- Viewing Additional RRM Settings Using the CLI296
- Configuring CCX Radio Management Features297
CHAPTER 11 Configuring Mobility Groupswireless Device Access1302
- Overview of Mobility302
- C H a P T E R 11 Configuring Mobility Groupswireless Device Access302
- Overview of Mobility Groups305
  - Determining When to Include Controllers in a Mobility Group307
- Configuring Mobility Groups307
- Configuring Auto-Anchor Mobility311
- Running Mobility Ping Tests315
Chapter 12 Configuring Hybrid Reapwireless Device Access317
- Overview of Hybrid REAP318
  - Hybrid-REAP Authentication Process318
  - Hybrid REAP Guidelines320
- Configuring Hybrid REAP321
Appendix333
Safety Considerations and Translated Safety Warnings334
- Safety Considerations334
- Warning Definition334
- Class 1 Laser Product Warning337
- Ground Conductor Warning339
- Chassis Warning for Rack-Mounting and Servicing341
- Battery Handling Warning for 4400 Series Controllers350
- Equipment Installation Warning352
- More than One Power Supply Warning for 4400 Series Controllers355
Appendix359
Declarations of Conformity and Regulatory Information359
- Regulatory Information for 1000 Series Access Points360
- FCC Statement for Cisco 2000 Series Wireless LAN Controllers366
- FCC Statement for Cisco 4400 Series Wireless LAN Controllers367
Appendix369
End User License and Warranty369
- End User License Agreement370
Appendix C End User License and Warranty370
- Limited Warranty372
  - Disclaimer of Warranty374
- General Terms Applicable to the Limited Warranty Statement and End User License Agreement374
- Additional Open Source Terms375
Appendix377
System Messages and LED Patterns377
- System Messages378
Appendix D System Message and LED Pattern378
- Interpreting Controller Leds381
- Interpreting Leds381
- Interpreting Lightweight Access Point Leds381
Logical Connectivity Diagrams383
Appendix E Logical Connectivity Diagram384
- Cisco Wism385
- Cisco 28/37/38Xx Integrated Services Router387
- Catalyst 3750G Integrated Wireless LAN Controller Switch388

Cisco SD2008T-NA - Chapter 5 Configuring Security Solutions

Table of Contents

Other manuals for Cisco SD2008T-NA

Related product manuals