User Guide for the CiscoWorks WLSE and WLSE Express, 2.12
Using the Wizard for WDS Deployment
Downloads: This chapterpdf (PDF - 271.0KB) The complete bookPDF (PDF - 11.22MB) | Feedback

Using the Deployment Wizard

Table Of Contents

Using the Deployment Wizard

About the Deployment Wizard

Using the Deployment Wizard

Description

Choosing the Deployment Type

Satisfying Requirements

Checking Software Versions

Creating the Configuration Template

Creating a General Configuration

Creating a Security Configuration

Setting up the WDS

Setting up WDS on Access Points

Setting up WDS on WLSMs

Deploying the Configuration

Finishing


Using the Deployment Wizard


The Deployment Wizard enables you to configure a wireless LAN (WLAN) using the Cisco Structured Wireless-Aware Network (SWAN) framework.

Using the wizard, you can deploy your network using the Wireless Domain Services (WDS) provided by the following:

Wireless LAN Services Modules (WLSM)

WDS access points

About the Deployment Wizard

The Deployment Wizard replaces many of the manual configuration procedures that are normally required to configure infrastructure access points and WDS devices and to configure the WLSE to discover and manage those devices.

Specifically, the Deployment Wizard helps you configure a Wireless LAN (WLAN) using the Cisco Structured Wireless-Aware Network (SWAN) framework. (For additional information on SWAN, see the Cisco Structured Wireless-Aware Implementation Guide on Cisco.com.) The wizard creates basic configurations for access points (APs) that can be deployed to existing devices managed by WLSE or deployed to devices that are added later. The wizard also configures WDS devices.

Besides configuring the devices to be managed by the WLSE, the Wizard enters the necessary device credentials on the WLSE and places devices in the managed state.

Newly-installed devices require basic configuration in order to be managed by the WLSE. The basic configurations created by the Wizard can be applied only to devices that are supported by the WLSE. Configurations are downloaded to devices when the devices power up and are deployed according to criteria that you set in the Wizard.

The SWAN framework for WLANs relies on the presence of Wireless Domain Services (WDS). WDS can be supplied by access points or a Wireless LAN Services Module (WLSM).

The Wizard configures WDS devices as follows:

WDS-WLSM—If you use a WLSM, you must manually configure some parameters on the WLSM. Details on how to configure the WLSM are displayed in the Wizard's Requirements screen. Other parameters are configured by the Wizard.

WDS-AP—If you use access points for WDS, you can chose manual or automatic configuration.

For configuring the access points, you configure a DHCP server to upload the initial configuration provided by the WLSE to newly-installed devices. Details on how to configure DHCP are displayed in the Deployment Wizard's Requirements screen.

Finally, a RADIUS server is required. You can use a separate AAA server or configure a WDS access point as a RADIUS server.

Related Topics

Using the Deployment Wizard

Using the Deployment Wizard


Note The roles and privileges assigned to your login determine whether you can use the Deployment Wizard.



Note If you do not want the wizard to launch at login, deselect the Launch at login checkbox. Then, when you want to launch the Wizard, click Wizard in the upper right corner of the screen.


The wizard steps you through the following screens:

1. Description—See Description.

2. Deployment Type—See Choosing the Deployment Type.

3. Requirements—See Satisfying Requirements

4. Software—See Checking Software Versions.

5. Configuration—See Creating the Configuration Template.

6. WDS Setup—See Setting up the WDS.

7. Deploy—See Deploying the Configuration.

8. Finish—See Finishing.


Note In all of the screens, click Next to move to the next screen, and click Back to modify a previous screen.



Related Topics

About the Deployment Wizard

Description

The Description screen displays general information about the Wizard and allows you to disable automatic launch of the Wizard after login.

Before completing a deployment using the Wizard, you will need to set up a DHCP server with boot file options that specify the IP address of the WLSE and the initial configuration file name (wlsestartup.ini). Details on DHCP requirements are explained in the Requirements screen.

When you finish going through the steps in the Wizard and install a new device in the network, the following occur:

1. The newly powered on device contacts the DHCP server to provide an IP address.

2. The device downloads the wlsestartup.ini file, which contains only minimal credentials and a command to Telnet to the WLSE.

3. The WLSE then discovers the device, adds it to inventory, manages it, and downloads a configuration template to it via SSH.

This template contains user-specified credentials (entered in the Wizard Configuration step), which overwrite the existing minimal credentials that were uploaded in the wlsestartup.ini file. The template also contains security information.

The Deployment Wizard launches right after you log in. To change this default behavior, so the Wizard does not automatically launch, deselect Launch at Login in this screen. To launch the Wizard, click Wizard in the upper right corner of any screen.

Related Topics

About the Deployment Wizard

Using the Deployment Wizard

Choosing the Deployment Type

Use this option to specify the type of deployment:

APinfrastructure access points with wireless domain services (WDS) provided by WDS access points (APs).

The WDS provides control path technologies that must be active on an AP in each AP subnet. For more information, see Understanding WDS Access Points.

WLSMinfrastructure access points with wireless domain services (WDS) provided by a wireless LAN service module (WLSM).

The WLSM is a module for the Cisco Catalyst 6500 series switches that provides WDS to the wireless network. For additional information, see Understanding WLSM WDS Devices.

Procedure


Step 1 Select either WLSM or AP, depending on the type of WDS deployment you are using.

Step 2 The screen refreshes and the next screen appears. See Satisfying Requirements.


Related Topics

What is WDS and Why Do I Need It?

About the Deployment Wizard

Satisfying Requirements

The Requirements screen provides information about configuration that must be completed outside the Wizard. The displayed requirements provide all the necessary details and are based on the deployment type you chose—WDS-AP or WDS-WLSM.

For either AP or WLSM WDS, you must configure DHCP. Optionally, you can configure AAA server settings. For WLSM WDS, there are further requirements.

Click Next to continue. See Checking Software Versions.

Checking Software Versions

This screen lists the minimum and recommended image versions for different device types. Devices must meet or exceed the minimum image versions in order to be deployed by the Wizard.

Click Import Image to import a new image from the desktop or from Cisco.com—See Importing Images to the WLSE.

Click Firmware Upgrade to schedule a firmware upgrade for managed devices—See Managing Firmware Jobs.

Click Compare Known Devices Version to check the firmware installed on devices that have already been discovered and inventoried. A table of devices is displayed showing:

Devices with firmware that does not meet the minimum version (displayed in red). These devices are not supported by the Wizard.

Devices that meet the minimum version requirement but do not have the recommended firmware installed (displayed in yellow). These devices are supported by the Wizard.

Devices that have the recommended firmware (displayed in green). These devices are supported by the Wizard.

Click Back to return to the display of images for all devices.

Click Next to continue. See Creating a General Configuration

Creating the Configuration Template

The Wizard uses two screens to create a configuration template:

General configuration (credentials)—see Creating a General Configuration.

Security configuration—see Creating a Security Configuration.

The template created by the Wizard is saved and is listed under Configuration > Templates as template type WIZARD. You can use the normal WLSE configuration template features to copy, edit, and delete templates; export templates to your local drive; and import templates from a file or from devices. For more information on managing Wizard templates, see "Using Wizard Templates."

Creating a General Configuration

This option creates a general configuration (set of AP credentials) to be applied to APs and added to the WLSE's database. You can add as many sets of credentials as you need. The credentials that you enter here are:

Telnet or SSH username and password and enable password—Required for applying configuration templates and upgrading firmware on APs.

SNMP community strings—Required for discovering devices and enabling other WLSE options, such as firmware upgrades, applying configuration templates, and radio management.

Procedure


Step 1 Complete the following:

Table 2-1 General Configuration 

Field
Description

Name

Name for the configuration.

Note You will use this name in the Wizard's Deploy step to assign the General Configuration to one or more access points.

Protocol

Select Telnet or SSH, and enter the following device credentials.

Note Usernames and passwords must match the login sequence on the access points. For more information see Supported Telnet/SSH Login Sequences for APs.

User Name

Telnet or SSH user name.

The following characters are not supported and cannot be entered in this field: double quote, single quote, and angle brackets (< >).

Password

Telnet or SSH user password.

Password Confirm

Enable Password

Telnet or SSH enable password.

Enable Password Confirm

SNMP RO Community

Read/write and read-only community strings.

Both read/write and read-only community strings are required in order to enable all WLSE management functions.

For more information on community strings (including characters that are not supported or not recommended), see Recommendations For Configuring SNMP Credentials.

SNMP RW Community


Step 2 Click Add. The General Configuration is added to the table at the bottom of the screen.


Note The General Configuration template name that you create with the Wizard also appears in the template listings under Configure > Templates.


Step 3 Repeat steps 1 and 2 to add more configurations.

Step 4 To remove a configuration, click Delete next to the name of the configuration in the table.

Step 5 Click Next to continue. See Creating a Security Configuration.


Creating a Security Configuration

This option sets up simple security configurations. This will allow you to enter all the access points' essential settings for basic security.

Procedure


Step 1 Complete the following:

Table 2-2 Security Configuration 

Field
Description

SSID Configuration

Apply to

Select one or both of the following:

Radio B/G—Select this option for radio 802.11b/g.

Radio A—Select this option for radio 802.11a.

SSID

Select one of the following:

Enter any alphanumeric, case-sensitive string, from 1 to 32 characters long.

Select Broadcast SSID in Beacon to allow devices without a specified SSID to associate with this access point. Click Broadcast SSID in Beacon for additional information.

VLAN

Note For AP-WDS deployments only.

Select one of the following:

No VLAN—Use this setting if there is no VLAN.

Enable VLAN ID—Use this setting to indicate there is a VLAN and enter the VLAN identification number.

Native VLAN—Select if this is a Native VLAN.

Mobility

Note For WLSM-WDS deployments only.

Select one of the following:

No Mobility Network ID—Select this if a mobility network ID is not required.

Enable Mobility Network ID—Use this option to require the use of a mobility network ID, then enter the ID number.

Security

Select one of the following:

No Security—Use this setting if you do not want to specify security options. Click No Security for additional information.

Static WEP Key—Use this setting to specify WEP encryption. Click Static WEP Key for additional information.

For 40-bit WEP keys, enter 10 hexadecimal digits (0-9, a-f, A-F).

For 128-bit WEP keys, enter 26 hexadecimal digits (0-9, a-f, A-F).

EAP Authentication—Use this setting to specify mandatory WEP, encryption open authentication + EAP, network EAP authentication, and no key management, RADIUS server authentication on port 1645. Click EAP Authentication for additional information.

RADIUS Server—Enter the hostname or IP address of the RADIUS server you are either adding or deleting.

RADIUS Server Secret—Enter the server's shared secret.


Step 2 Click Add to add the security configuration to the SSID table at the bottom of the screen.

Step 3 Repeat steps 1 and 2 to add more security configurations.

Step 4 To remove a configuration, click Delete next to the name of the configuration you want to remove from the table.

Step 5 Click Next to continue. See Setting up the WDS.


Setting up the WDS

WDS must be set up for WLSE radio management features to work. There are two ways to set up the WDS: automatically and manually. For an explanation of each see: WDS on an Access Point and WDS on WLSM.

WDS can be provided by either access points or a Wireless LAN Services Module (WLSM). The WDS setup for each is different:

AP WDS Setup—See Setting up WDS on Access Points.

WLSM WDS Setup—See Setting up WDS on WLSMs.

WDS on an Access Point

When an access point is discovered and inventoried:

If the automatic configuration option is selected and if this is the first access point discovered in a subnet, the AP-WDS template is pushed to this access point. This access point then becomes the active WDS of the subnet, and the second and third access points discovered in the same subnet become the backup WDS devices.

If the manual configuration option is selected, the MAC address of the AP is compared to the configured MAC address for the subnet. If both match, the AP-WDS template is uploaded to the access point.

If the configuration is manual but the MAC address does not match the configured WDS MAC address for the given subnet, the template, which contains the WLCCP credentials, is uploaded to the access point.

WDS on WLSM

When a WLSM is discovered and inventoried, the WLSM template is uploaded to the WLSM. When a new access point joins the network, the corresponding access point template, which contains the WLCCP credentials, is uploaded to the access point based on the subnet that it is in.

Setting up WDS on Access Points

Use this option to set up WDS on access points.

Procedure


Step 1 To automatically configure WDS:

a. Select Automatic WDS Configuration.

b. Click Save.

c. Click Next to continue. See Deploying the Configuration.

Step 2 To manually configure WDS:

a. Select Manual WDS Configuration.

b. Click Insert New Row to add information about a WDS access point. You can enter an active and backup WDS access points for each subnet.

Complete the following:

Table 2-3 AP-WDS Setup 

Field
Description

WDS MAC Address

Enter the MAC address of the WDS access point. Use this format:

aaaa.bbbb.cccc

Subnet

Enter the IP address and subnet mask separated by a backslash. For example:

172.10.10.0/24

Active/Backup

Select Active or Backup to indicate if this is an active or a backup WDS.


To add another row, click Insert New Row.

To delete a row, select it, then click Delete.

To save the setup, click Save All.

c. Click Next to continue. See Deploying the Configuration.


Setting up WDS on WLSMs

Use this option to set up WDS on WLSMs.

Procedure


Step 1 If you selected WLSM in the Deployment Type screen, complete the following:

Table 2-4 WLSM WDS Configuration 

Field
Description

WLSM IP

Enter the IP address of the WLSM. For example:

172.10.10.100

Subnet Details

The subnets the WLSM manages. For each subnet, enter the IP address and subnet mask separated by a backslash. For example:

172.10.10.0/24

Because each WLSM can support more than one subnet, you can enter multiple subnets.


To add another row, click Insert New Row.

To delete a row, select it, then click Delete.

To save the setup, click Save All.

Step 2 Click Next to continue. See Deploying the Configuration.


Deploying the Configuration

The Deployment Wizard automatically discovers all deployed access points, uploads configurations, and manages all access points. You can create deployment specifications which include an auto-configuration and a configuration template. The auto-configuration and the configuration template are saved and can be accessed later from the Configuration tab (Configure > Auto Update > Automanaged Configuration and Configure > Templates).

You can add as many different deployment specifications as you need.

Procedure


Step 1 Complete the following:

Table 2-5 Deploy Configuration 

Field
Description

Enable Timer for Deploying Configurations

Select to deploy this configuration during a specified time interval.

This sets the timer for all configurations.

This option has the same effect as enabling filtering for auto-manage devices in Devices > Discover > Discover > Advanced Options > Enable Filtering for Auto-Managed Devices. If you set Enable Timer in the Wizard, these settings will be changed correspondingly under Advanced Options.

If you set the timer under Advanced Options, the settings in the Wizard will be changed correspondingly.

Note If you want to enable the timer for certain MAC addresses, you can do so under Devices > Discover > Discover > Advanced Options.

From/To

Specify the time period for deploying this configuration.

Assign Name to the Auto-Managed Configuration

Name

Enter a name for the auto-configuration.

Assign matching criteria to the Auto-Managed Configuration

Description

Enter a description for the auto-managed configuration.

Matching Criteria

Subnet

Specify the subnets to which this configuration will be deployed by selecting a subnet, then clicking >>.

To remove a subnet from the list, select it and then click Remove.

Save Configurations to NVRAM

Select the checkbox to save the configuration to the access points' NVRAM (IOS access points only).

Assign Configuration to the Associated Configuration Template

General Config

From the list, select one previously-defined general configuration to associate to the configuration template.

Security Config

From the list, select one or more previously-defined security configurations to associate to the configuration template.

Then click >> to add the general and security configurations to the list.

To remove a configuration from the list, select it and click Remove.


To add the auto-managed configuration and the associated configuration template to the table at the bottom of the screen, click Add.

Result: The name of the auto-managed configuration and the configuration template are added to the table.

To change an auto-managed configuration and its associated configuration template, select it, then click Modify.


Note The name cannot be modified; only the criteria and deployment timer can be modified.


To remove an auto-managed configuration and its associated configuration template from the table, select it, then click Delete.

To preview the configuration template, click the icon under Preview Configuration Template.

Result: The CLI commands that will be applied are displayed.

Step 2 Click Next to finish. See Finishing.

Related Topics

Assigning an Auto-Managed Configuration

Managing Device Configurations

Finishing

After you have deployed the access points in your network:

The devices will automatically be managed by the WLSE.

You can use the options listed in the Finish screen to monitor access points and use other WLSE features.