История страницы

wlc(config)# radius-server local

wlc(config-radius)#

wlc(config-radius)# nas <NAME>

wlc(config-radius-nas)#

wlc(config-radius-nas)# key ascii-text { <KEY> | encrypted <ENCRYPTED-KEY> }

<KEY> – a string of [4..64] ASCII characters;

<ENCRYPTED-KEY> – encrypted key, specified by a string of [8..128] characters.

wlc(config-radius)# virtual-server <NAME>

wlc(config-radius-vserver)#

Add RADIUS server to the list of used servers and enter server configuration mode.

wlc(config)# radius-server host
{ <IP-ADDR> | <IPV6-ADDR> }
[ vrf <VRF> ]

wlc(config-radius-server)#

<IP-ADDR> – RADIUS server IP address, specified as AAA.BBB.CCC.DDD, where each part takes values [0..255];

<IPV6-ADDR> – RADIUS server IPv6 address, specified as X:X:X:X::X, where each part takes values in HEX [0..FFFF];

<VRF> – VRF name, specified by a string of up to 31 characters.

wlc(config-radius-server)# key ascii-text { <KEY> | encrypted <ENCRYPTED-KEY> }

<KEY>  – string of [4..64] ASCII characters;

<ENCRYPTED-KEY> – encrypted key, specified by a string of [8..128] characters.

Create AAA profile and enter its configuration mode.

wlc(config)# aaa radius-profile <NAME>

wlc(config-aaa-radius-profile)#

<NAME> – server profile name, specified by a string of up to 31 characters.

Specify RADIUS server in AAA profile.

wlc(config-aaa-radius-profile)# radius-server host
{ <IP-ADDR> | <IPV6-ADDR> }

<IP-ADDR> – RADIUS server IP address, specified as AAA.BBB.CCC.DDD, where each part takes values [0..255];

<IPV6-ADDR> – RADIUS server IPv6 address, specified as X:X:X:X::X, where each part takes values in HEX [0..FFFF].

wlc(config)# softgre-controller

wlc(config-softgre-controller)#

local – режим конфигурации, при котором параметры SoftGRE DATA туннелей получаются из локальной конфигурации маршрутизатора;

radius – режим, при котором параметры SoftGRE DATA туннелей запрашиваются у RADIUS-сервера;

wlc – режим, при котором параметры SoftGRE DATA туннелей запрашиваются у WLC.

Disable the exchange of ICMP messages that are used to check the availability of remote Wi-Fi tunnel gateway controller.

<VLAN-ID> – vlan number, in which the user traffic passes, takes values [2..4094];

<LIST_ID> – vlan list, comma-separated (1,2,3), takes values [2..4094];

<RANGE_ID> – vlan range, dash-separated (1-3), takes values [2..4094].

wlc(config-softgre-controller)# enable

wlc(config)# tunnel softgre <TUN>

<MODE> – tunnel operating mode, possible options:

• data – data mode;
• management – management mode.

Set the local tunnel gateway IP address.

Enable the SoftGRE tunnel configuration use for automatic tunneks creations with the same mode and local address.

Switch to the controller configuration.

wlc(config)# wlc

Create a profile for access points general settings configuration.

wlc(config-wlc)# ap-profile <NAME>

wlc(config-wlc-ap-profile)#

wlc(config-wlc-ap-profile)# password ascii-text { <CLEAR-TEXT> | encrypted <HASH_SHA512> }

wlc(config-wlc-ap-profile)# exit

<CLEAR-TEXT> – password, specified by [8-64] characters.

<HASH_SHA512> – sha512 password hash, specified by [16-128] characters.

wlc(config-wlc)# radio-2g-profile <NAME>

wlc(config-wlc-radio-2g-profile)# obss-coexistence {on | off}

on – automatic channel bandwidth reduction mode is enabled;

off – automatic channel bandwidth reduction mode is disabled;

<WORK-MODE> – operation mode, possible options:

• bg, nax, bgnax – for 2.4 GHz frequency range.

wlc(config-wlc-radio-2g-profile)# limit-channels <CHANNEL>[,<CHANNEL>]

<CHANNEL> – number of the channel used, possible options:
For 2g channels chose from the bandwidth:
[1.. 13].

<BANDWIDTH> – channel bandwidth, possible options:

• 20;
• 40L;
• 40U.

The possible values of the parameter, depending on the access point model, set the following power values in dBm:

Create a configuration profile for the radio interface operating in the 5 GHz frequency range.

wlc(config-wlc)# radio-5g-profile <NAME>

on – automatic channel bandwidth reduction mode is enabled;

off – automatic channel bandwidth reduction mode is disabled.

<WORK-MODE> – operation mode, possible options:

• anacax – for 5 GHz frequency range.

wlc(config-wlc-radio-5g-profile)# limit-channels <CHANNEL>[,<CHANNEL>]

<CHANNEL> – number of the channel used, possible options:
For 5g each 4 channel chose from the bandwidth:
[36.. 64]
[100.. 144]
[149.. 165]

<BANDWIDTH> – channel bandwidth, possible options:

• 20;
• 40L;
• 40U;
• 80.

The possible values of the parameter, depending on the access point model, set the following power values in dBm: 

auto — enabled;

disabled — disabled. DFS channels are not available for selection;

forced — disabled. DFS channels are available for selection.

wlc(config-wlc)# radius-profile <RADIUS-ID>

wlc(config-wlc-radius-profile)#

<CLEAR-TEXT> – password, specified by [8-64] characters.

<HASH_SHA512> – sha512 password hash, specified by [16-128] characters.

wlc(config-wlc)# ssid-profile <NAME>

wlc(config-wlc-ssid-profile)#

<DESCRIPTION> – description, specified by a string of up to 255 characters.

<BAND> – frequency range, possible options:

• 2g;
• 5g.

<MODE> – security mode, possible options: 

• WPA;
• WPA2;
• WPA2_1X;
• WPA2_WPA3;
• WPA2_WPA3_1X;
• WPA3;
• WPA3_1X;
• WPA_1X;
• WPA_WPA2;
• WPA_WPA2_1X;
• off.

WPA3 security mode is supported only on WEP-3ax, WEP-30L, WOP-30L, WOP-30LS access points.

If mixed security mode (e.g., WPA2_WPA3) is selected, WPA3 will be applied only to APs that support it, and the other APs will use the second mode (WPA2).

wlc(config-wlc)# ap-location <NAME>

wlc(config-wlc-ap-location)#

<DESCRIPTION> – description, specified by a string of up to 255 characters.

wlc(config-wlc-ap-location)# radio-5g-profile <NAME>

wlc(config-wlc-ap-location)# radio-2g-profile <NAME>

Specify the general settings profile for the access points.

<NAME> – SSID profile name, specified by a string of up to 235 characters.

wlc(config-wlc)# ip-pool <NAME>

wlc(config-wlc-ip-pool)#

<ADDR/LEN> – IP address and network mask, specified as AAA.BBB.CCC.DDD/EE, where each part of AAA – DDD takes values [0..255] and EE takes values [1..32].

Specify the location profile name that is applied to the specified address space.

wlc(config-wlc)# service-activator

wlc(config-wlc-service-activator)#

Configure automatic registration of access points on the controller.