-
Cisco Wireless LAN Controller Configuration Guide, Release 5.1
-
Preface
-
Chapter 1 - Overview
-
Chapter 2 - Using the Web-Browser and CLI Interfaces
-
Chapter 3 - Configuring Ports and Interfaces
-
Chapter 4 - Configuring Controller Settings
-
Chapter 5 - Configuring Security Solutions
-
Chapter 6 - Configuring WLANs
-
Chapter 7 - Controlling Lightweight Access Points
-
Chapter 8 - Managing Controller Software and Configurations
-
Chapter 9 - Managing User Accounts
-
Chapter 10 - Configuring Radio Resource Management
-
Chapter 11 - Configuring Mobility Groups
-
Chapter 12 - Configuring Hybrid REAP
-
Appendix A - Safety Considerations and Translated Safety Warnings
-
Appendix B - Declarations of Conformity and Regulatory Information
-
Appendix C - End User License and Warranty
-
Appendix D - Troubleshooting
-
Appendix E - Logical Connectivity Diagrams
-
Index
-
Table Of Contents
Numerics - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W -
Index
Numerics
11n Mode parameter 4-18
1250 series access points
and PoE Status field 7-62
operating modes when using PoE 7-61
transmit power settings when using PoE 7-61
3DES IPSec data encryption 5-9
7920 AP CAC parameter 6-33
7920 Client CAC parameter 6-33
7920 support mode
configuring 6-31
described 6-31
7921 support mode 6-31
802.11a (or 802.11b) > Client Roaming page 4-41
802.11a (or 802.11b) > Video Parameters page 4-54
802.11a (or 802.11b) > Voice Parameters page 4-52
802.11a (or 802.11b/g) > EDCA Parameters page 4-65
802.11a (or 802.11b/g) Global Parameters > Auto RF page 10-8
802.11a (or 802.11b/g) Global Parameters page 4-14, 10-37
802.11a (or 802.11b/g) Network Status parameter 4-14
802.11a/n (or 802.11b/g/n) Cisco APs > Configure page 6-40, 10-26
802.11a/n (or 802.11b/g/n) Radios page 4-58, 10-25
802.11a > Pico Cell page 10-42
802.11a > Pico Cell page with pico cell mode V2 parameters 10-42
802.11a > RRM > Coverage page 10-15
802.11a > RRM > DCA page 10-12
802.11a > RRM > Dynamic Channel Assignment (DCA) page 10-12
802.11a > RRM > General page 10-17
802.11a > RRM > Tx Power Control (TPC) page 10-10
802.11b/g/n Cisco APs > Configure page 7-51, D-36
802.11 bands
configuring using the CLI4-15to 4-17
configuring using the GUI4-14to 4-15
802.11g Support parameter 4-14
802.11n
clients 7-66
configuring
devices 4-17
802.11n (2.4 GHz) High Throughput page 4-18
802.1Q VLAN trunk port 3-5
802.1X
configuring 6-19
described 6-20
dynamic key settings 6-19
802.1X+CCKM
configuring 6-21
described 6-20
802.1X authentication for access points
configuring
the switch 7-12
described 7-7
802.1x Authentication parameter 7-9
802.3 bridging
configuring using the CLI 4-32
configuring using the GUI4-31to 4-32
802.3 Bridging parameter 4-32
802.3 frames 4-31
802.3X flow control, enabling 4-31
A
AAA override
configuring
using the CLI 5-78
described 5-76
Access Control List Name parameter 5-54
access control lists (ACLs)
applying to an interface
using the CLI 5-63
applying to a WLAN
using the CLI 5-63
applying to the controller CPU
using the CLI 5-63
configuring
configuring for the debug facilityD-31to D-32
counters
configuring using the CLI 5-62
configuring using the GUI 5-54
described 5-53
identity networking 5-73
using with the debug facilityD-30to D-31
Access Control Lists > Edit page 5-56
Access Control Lists > New page 5-54
Access Control Lists > Rules > New page 5-55
Access Control Lists page 5-53
Access Mode parameter 4-26, 4-28
access point event logs, viewing D-14
access point groups
assigning access points to
using the CLI 6-45
using the GUI 6-45
creating
using the CLI 6-44
described 6-41
illustrated 6-42
access point manager interface, configuring using the configuration wizard 4-5
access points
20-MHz channelization 10-26
40-MHz channelization 10-26
assisted roaming 4-40
authorization list 7-17
authorizing
using MICs 7-16
using SSCs 7-16
using the CLI 7-17
using the GUI 7-16
configuring hybrid REAP using the CLI12-13to 12-14
embedded 7-13
guidelines for operating in Japan B-6
LEDs
configuring 7-65
interpreting D-2
migrating from the -J regulatory domain to the -U regulatory domain7-46to 7-49
number supported per controller 3-4
priming 7-2
regulatory informationB-2to B-8
rules for operating in TaiwanB-7to B-8
supported for use with hybrid REAP 12-2
supporting oversized images 7-25
troubleshooting
using Telnet or SSH D-38
VCI strings 7-18
verifying that they join the controller 7-3
Accounting Server parameters 6-50
accounting servers, disabling per WLAN 6-49
ACL. See access control lists (ACLs)
ACS server configuration page 6-47
Action parameter 5-56
active exploits 5-115
Add AAA Client page (on CiscoSecure ACS) 5-5, 5-19
Add AP button 12-17
Add Interface-Mapping button 6-44
Add New Rule button 5-54
Add Web Server button 9-17
administrator access 4-24
administrator usernames and passwords, configuring 4-24
Admin Status parameter 3-21
Admission Control (ACM) parameter 4-53, 4-54
AES CBS IPSec data encryption 5-9
AES-CCMP 6-19
AES parameter 6-21
Aggregated MAC Protocol Data Unit (A-MPDU) 4-20
Aggregated MAC Service Data Unit (A-MSDU) 4-20
aggregation method, specifying 4-20
AirMagnet Enterprise Analyzer D-35
Aironet IE parameter 6-23, 6-38
Aironet IEs
configuring using the CLI 6-40
configuring using the GUI 6-38
Airopeek D-35
Alarm Trigger Threshold parameter 10-34
All APs > Access Point Name > VLAN Mappings page 12-13
All APs > Details (Advanced) page
assigning access point groups 6-45
configuring CDP 4-69
configuring country codes 7-43
configuring link latency 7-58
configuring PoE 7-62
All APs > Details (Credentials) page 7-9
All APs > Details (General) page 12-11
All APs > Details (High Availability) page 7-34, 7-38
All APs > Details (H-REAP) page 12-12
All APs > Details (Inventory) page 7-54
All APs > Details page 10-34, D-36
Allow AAA Override parameter 5-78
anchor controller in inter-subnet roaming 11-4
AnchorTime parameter 10-13
anonymous local authentication bind method 5-33, 5-36
Anonymous Provision parameter 5-43
Antenna Gain parameter 10-28
Antenna parameter 10-27
Antenna Type parameter 10-27
AP > Clients > Traffic Stream Metrics page 4-59
AP > Clients page 4-59
AP801 access point 7-13
AP Authentication Policy page 5-66, 10-34
AP Failover Priority parameter 7-39
AP Group Description parameter 6-43
AP Group Name parameter 6-43, 6-45
AP Groups VLAN Feature Enable parameter 6-43
AP Groups VLAN page 6-43, 6-44, 6-54
AP-manager interface
configuring
using the CLI 3-14
creating multiple interfaces3-37to 3-38
described 3-7
illustration
of four AP-manager interfaces 3-37
of three AP-manager interfaces 3-36
of two AP-manager interfaces 3-35
AP Mode parameter 10-34, 12-12, D-36
AP Policies page 7-17
AP Primary Discovery Timeout parameter 7-34
ASLEAP detection 5-115
Assignment Method parameter 10-26, 10-28
asymmetric tunneling 11-26
audience of document xx
authenticated local authentication bind method 5-33, 5-36
Authentication Priority parameter 5-11, 5-24
Authentication Protocol parameter 4-28
Auth Key Mgmt parameter 6-21
Authority ID Information parameter 5-43, 12-20, 12-21
Authority ID parameter 5-43, 12-20
Authorize APs Against AAA parameter 7-17
Authorize Self Signed Certificate (SSC) parameter 7-17
authorizing access points
using the CLI 7-17
using the GUI 7-16
auto-anchor mobility
configuring
guidelines 11-21
AutoInstall
example operation 4-9
obtaining
DHCP addresses for interfaces 4-7
TFTP server information 4-7
overview 4-6
selecting configuration file 4-8
using 4-6
auto RF, configuring using the configuration wizard 4-6
Average Data Rate parameter 4-44, 4-47
Average Real-Time Rate parameter 4-44, 4-48
Avoid Cisco AP Load parameter 10-13
Avoid Foreign AP Interference parameter 10-13, 11-18
Avoid Non-802.11a (802.11b) Noise parameter 10-13
B
backup controllers
configuring
described 7-32
Back-up Primary Controller IP Address parameter 7-34
Back-up Primary Controller Name field 7-34
Back-up Secondary Controller IP Address parameter 7-34
Back-up Secondary Controller Name parameter 7-34
bandwidth-based CAC
described 4-50
enabling
using the CLI 4-60
using the GUI 4-53
Base MAC Address parameter 3-26
Beacon Period parameter 4-14
Bind Password parameter 5-33
Bind Username parameter 5-33
bootup script for configuration wizard 4-4
bridge protocol data units (BPDUs) 3-23
Buffered Log Level parameter D-9
Burst Data Rate parameter 4-44, 4-48
Burst Real-Time Rate parameter 4-44, 4-48
C
CAC
configuring for 7920 phones 6-31
described 4-50
enabling
using the CLI 4-61
using the GUI 4-54
viewing using the CLI 4-62
Canadian compliance statement B-3
Catalyst 3750G Integrated Wireless LAN Controller Switch
described 1-11
logical connectivity diagram and associated software commandsE-4to E-6
cautions xxi
CCA Sensitivity Threshold parameter 10-43
CCKM
configuring 6-21
described 6-20
hybrid-REAP groups 12-15
with mobility 11-7
CCX
configuring Aironet IEs
using the CLI 6-40
using the GUI 6-38
described 6-37
link test 7-55
viewing a client's version
using the CLI 6-40
CCX Layer 2 client roaming
configuring
using the CLI 4-42
debugging using the CLI 4-43
described 4-40
obtaining information using the CLI 4-42
CCX radio management
configuring
using the CLI 10-38
debugging using the CLI 10-40
features 10-36
hybrid-REAP considerations 10-36
obtaining information using the CLI10-39to 10-40
CCXv5 clients
enabling location presence 4-84
CCXv5 Req button D-22
CCX Version parameter 6-39
CDP > AP Neighbors > Detail page 4-72
CDP > AP Neighbors page 4-72
CDP > Global Configuration page 4-69
CDP > Interface Neighbors > Detail page 4-71
CDP > Interface Neighbors page 4-70
CDP > Traffic Metrics page 4-73
CDP Advertisement Version parameter 4-69
CDP AP Neighbors page 4-71
CDP Protocol Status parameter 4-69
CDP State parameter 4-70
Certificate Authority (CA) certificates
downloading
using the GUI 8-12
overview 8-11
using with local EAP 5-39, 5-44
Certificate Issuer parameter 5-42
Certificate Password parameter 8-10
Certificate Type parameter 7-17
Change Rules Priority parameter 5-87
Channel Assignment Leader parameter 10-14
Channel Assignment Method parameter 10-13
channel bonding in the 5-GHz band 10-27
channels
statically assigning using the CLI 10-29
statically assigning using the GUI10-25to 10-29
Channel Scan Duration parameter 10-18
Channel Width parameter 10-14, 10-26
Check Against CA Certificates parameter 5-42
Check Certificate Date Validity parameter 5-42
chokepoints for RFID tag tracking 4-77
CIDS Sensor Add page 5-100
CIDS Sensors List page 5-99
CIDS Shun List page 5-103
ciphers
described 6-20
Cisco 2100 Series Wireless LAN Controllers
AutoInstall interfaces 4-7
described 1-8
FCC statement B-8
features not supported 1-8
network connections1-16to 1-17
Cisco 28/37/38xx Integrated Services Router
described 1-11
logical connectivity diagram and associated software commands E-3
using 4-88
versions 1-11
Cisco 4400 Series Wireless LAN Controllers
AutoInstall interfaces 4-7
described 1-9
FCC statement B-9
models 3-4
network connections1-17to 1-18
supporting more than 48 access points3-34to 3-38
Cisco 7920 Wireless IP Phones 6-31
Cisco 7921 Wireless IP Phones 6-31
Cisco Centralized Key Management (CCKM). See CCKM
Cisco Clean Access (CCA) 6-50
Cisco Client Extensions (CCX). See CCX
Cisco Discovery Protocol (CDP)
configuring
using the CLI 4-74
debugging using the CLI 4-76
described 4-66
enabling using the GUI4-69to 4-70
sample network 4-68
supported devices 4-67
viewing neighbors
viewing traffic information
using the CLI 4-75
using the GUI 4-73
Cisco Discovery Protocol parameter 4-70
Cisco high-power switches 7-63
Cisco Logo parameter 9-10
Cisco NAC Appliance 6-50
CiscoSecure Access Control Server (ACS) 5-4
Cisco Unified Wireless Network (UWN) Solution
illustrated 1-3
Cisco Wireless Control System (WCS) 1-2
Cisco WiSM
configuring the Supervisor 7204-86to 4-87
guidelines 4-86
logical connectivity diagram and associated software commandsE-2to E-3
maximum number supported by router chassis 1-10
SSC key-hash 7-14
CKIP
configuring
using the CLI 6-25
described 6-23
clearing the controller configuration 8-22
Clear Stats button 11-19
CLI
basic commands 2-9
enabling wireless connections 2-9
logging out 2-8
navigating 2-9
troubleshooting commandsD-5to D-7
Client Certificate Required parameter 5-42
client location, using WCS 1-8
client MFP 5-64
Client Protection parameter 5-68
client reporting
configuring using the CLID-24to D-27
configuring using the GUID-21to D-24
described D-15
Client Reporting page D-23
client roaming, configuring4-38to 4-43
clients
connecting to WLANs 12-14
viewing
viewing CCX version
using the CLI 6-40
Clients > AP > Traffic Stream Metrics page 4-57
Clients > AP page 4-57
Clients > Detail page
configuring client reporting D-22
viewing a client's CCX version 6-39
viewing client details 7-30, 7-68
viewing the status of workgroup bridges 7-30
viewing voice and video settings 4-56
Clients page
performing a link test 7-56
viewing clients 7-66
viewing the status of workgroup bridges 7-29
viewing voice and video settings 4-55
Client Type parameter 7-30, 7-31
Commands > Reset to Factory Defaults page 4-3
Community Name parameter 4-26
conditional web redirect 6-46
configuring
using the CLI 6-49
using the GUI 6-48
described 6-46
Conditional Web Redirect parameter 6-48, 6-49
Configuration File Encryption parameter 8-17, 8-19
configuration files
downloading
uploading
configuration wizard
described 4-2
Configure option for RRM override 10-25
Confirm Password parameter 12-10
Console Log Level parameter D-9
controller failure detection time, reducing 7-32
controller network module
baud rate 3-3
versions 3-4
controllers
configuration
clearing 8-22
erasing 8-22
saving 8-21
discovery process 7-2
multiple-controller deployment1-4to 1-5
resetting factory default settings
using the CLI 4-3
using the GUI 4-3
single-controller deployment1-3to 1-4
synchronizing with location appliance 4-83
types of memory 1-15
upgrading software
Controller Spanning Tree Configuration page 3-26
Controller Time Source Valid parameter 5-68
Control Path parameter 11-23
conventions of documentxxito xxiii
Country Code parameter 7-43
country codes
commonly used 7-40
configuring
using the configuration wizard 4-5
described 7-40
Japanese 7-47
viewing using the CLI 7-45
Country page 7-41
Coverage Exception Level per AP parameter 10-16
coverage hole detection and correction 10-4
CPU Access Control Lists page 5-59
CPU ACL Mode parameter 5-59
Current Channel parameter 10-28
Custom Signatures page 5-108
D
Data Path parameter 11-23
Data Rates parameter 4-15
date
configuring manually 4-10
configuring through NTP server 4-10
setting
using the CLI 4-11
using the GUI 4-10
DCA Channel Sensitivity parameter 10-13
DCA Channels parameter 10-14
debug commands, sending 7-22
debug facility
default enable password 7-4
Default Mobility Group parameter 11-11
Default Routers parameter 6-10
Delivery Traffic Indication Map (DTIM). See DTIM period
Deny Counters parameter 5-57
Description parameter 5-30, 12-10
Designated Root parameter 3-26
DES IPSec data encryption 5-9
Destination parameter 5-55
Destination Port parameter 5-56
device certificates
downloading
overview 8-9
using with local EAP 5-39, 5-44
DHCP
configuring using the CLI 6-8
configuring using the GUI 6-7
DHCP Addr. Assignment Required parameter 6-8
DHCP option 43, in controller discovery process 7-2
DHCP option 82
described 5-51
example 5-52
DHCP proxy, configuring4-22to 4-23
DHCP Scope > Edit page 6-10
DHCP scopes
configuring
described 6-9
DHCP Scopes page 6-9
DHCP server discovery 7-2
DHCP Server IP Addr parameter 6-8
DHCP Server Override parameter 6-8
DHCP servers
configuring using the configuration wizard 4-5
internal 6-6
diagnostic channel
configuring
using the GUI D-16
described D-15
Diagnostic Channel parameter D-16
directed roam request 4-40
Direction parameter 5-56
disabled clients, configuring a timeout 6-13
discovery request timer, configuring 7-36
distribution system ports3-4to 3-5
Diversity parameter 10-28
DNS Domain Name parameter 6-10
DNS Servers parameter 6-10
document
audience xx
purpose xx
domain name server (DNS) discovery 7-2
Download button
downloading a CA certificate 8-13
downloading a configuration file 8-20
downloading a customized web authentication login page 9-19
downloading a device certificate 8-10
downloading a signature file 5-108
Download File to Controller page
downloading a customized web authentication login page 9-18
downloading CA certificates 8-12
downloading configuration files 8-19
downloading device certificates 8-9
downloading IDS signatures 5-107
DSCP parameter 5-56
DTIM period, configuring for MAC filtering 6-13
DTPC Support parameter 4-15
dynamic channel assignment (DCA)
20-MHz channelization 10-4, 10-14
40-MHz channelization 10-4, 10-14
configuring
described 10-3
sensitivity thresholds 10-14
dynamic frequency selection7-49to 7-50
dynamic interface
configuring
using the CLI 3-18
described 3-8
dynamic transmit power control, configuring 4-15
dynamic WEP, configuring 6-19
E
EAP-FAST Method Parameters page 5-42
EAP-FAST parameter 5-41
EAP Profile Name parameter 5-43
EAP-TLS parameter 5-41
EDCA Profile parameter 4-65
Edit QoS Profile page 4-44
Edit QoS Role Data Rates page 4-47
Egress Interface parameter 9-27
Email Input parameter 9-28
Enable AP Local Authentication parameter 12-18
Enable Check for All Standard and Custom Signatures parameter 5-109
Enable Controller Management to be accessible from Wireless Clients parameter 2-10, 5-51
Enable Counters parameter 5-54
Enable Coverage Hole Detection parameter 10-15
Enable CPU ACL parameter 5-59
Enable Dynamic AP Management parameter 3-38
Enable EAP-FAST Authentication parameter 12-20
Enable IGMP Snooping parameter 4-36
Enable LEAP Authentication parameter 12-19
Enable Link Latency parameter 7-59
Enable Low Latency MAC parameter 4-65
Enable Password parameter 7-5
Enable Server Status parameter 5-33
Encryption Key parameter 6-24
end user license agreementC-2to C-4
enhanced distributed channel access (EDCA) parameters
configuring using the CLI 4-66
configuring using the GUI4-64to 4-65
enhanced neighbor list
described 4-40
request (E2E) 4-40
erasing the controller configuration 8-22
Ethernet connection, using remotely 2-8
Ethernet Multicast Mode parameter 4-35
European declaration of conformityB-4to B-5
event reporting for MFP 5-65
Expedited Bandwidth parameter 4-53
expedited bandwidth requests
described 4-51
enabling
using the CLI 4-61
using the GUI 4-53
Extensible Authentication Protocol (EAP)
configuring 6-19
setting local timers5-44to 5-45
timeout and failure counters
per access point 5-48
per client 5-48
extension channel 10-28
F
factory default settings
resetting using the CLI 4-3
resetting using the GUI 4-3
failover priority for access points
configuring
using the CLI 7-39
described 7-37
viewing using the CLI 7-39
failover protection1-15to 1-16
fake access point detection 5-115
Fast Ethernet port 3-4
fast heartbeat timer
configuring
using the CLI 7-36
using the GUI 7-34
described 7-32
fast SSID changing
configuring using the CLI 4-31
configuring using the GUI 4-30
FCC declaration of conformityB-2to B-3
FCC statement
2100 series controllers B-8
4400 series controllers B-9
Federal Information Processing Standards (FIPS) 5-11
file transfers 1-14
File Type parameter
downloading a CA certificate 8-12
downloading a configuration file 8-19
downloading a customized web authentication login page 9-18
downloading a device certificate 8-9
upgrading controller software 8-5
uploading a configuration file 8-17
uploading PACs 8-15
filter, using to view clients7-66to 7-67
Fingerprint parameter 5-101
flashing LEDs, configuring 7-65
foreign controller in inter-subnet roaming 11-4
Forward Delay parameter 3-27, 3-28
Fragmentation Threshold parameter 4-14
Friendly Rogue > Create page 5-87
FTP server guidelines 8-2
G
General (controller) page
configuring 802.3 bridging 4-32
configuring an RF group 10-6
enabling link aggregation 3-32
enabling multicast mode 4-35
General (security) page 5-29, 5-116
Generate Password parameter 9-5
gigabit Ethernet port 3-4
Global AP Failover Priority parameter 7-38
Global Configuration page
configuring authentication for access points 7-9
configuring backup controllers 7-33
configuring failover priority for access points 7-38
configuring global credentials for access points 7-5
global credentials for access points
configuring
described 7-4
overriding
using the CLI 7-6
using the GUI 7-5
Group Mode parameter 10-8, 11-17
Group Name parameter 11-12, 12-17
Group Setup page (on CiscoSecure ACS) 5-21
Guest LAN parameter 9-26
guest N+1 redundancy 11-20
guest user accounts
creating as a lobby ambassador9-4to 9-6
viewing
using the CLI 9-7
using the GUI 9-6
Guest User parameter 5-30, 12-10
Guest User Role parameter 5-30, 12-10
guest WLAN, creating 9-5
GUI
enabling wireless connections 2-9
guidelines 2-2
opening 2-2
using 2-2
H
Headline parameter 9-10
Hello Time parameter 3-27, 3-28
help, obtaining 2-2
hex2pcap sample output D-33
high-density network
benefits 10-41
example 10-41
overview 10-40
Honeypot access point detection 5-115
HREAP Group Name parameter 12-12
HREAP Groups > Edit page 12-17, 12-18, 12-19
HREAP Groups page 12-17
H-REAP Local Switching parameter 12-8
H-REAP Mode AP Fast Heartbeat Timeout parameter 7-34
H-REAP Mode AP Fast Heartbeat Timer State parameter 7-34
HTTP Access parameter 2-3
HTTP Configuration page 2-3
HTTPS Access parameter 2-3
hybrid REAP
access points supported 12-2
authentication process12-2to 12-4
bandwidth restriction 12-2
configuring
access points using the CLI12-13to 12-14
access points using the GUI12-11to 12-13
controller using the GUI12-6to 12-10
guidelines 12-4
illustrated 12-2
number of access points supported 12-2
overview 12-2
hybrid-REAP groups
backup RADIUS server 12-15
CCKM 12-15
configuring
using the CLI 12-20
described 12-15
example 12-15
local authentication 12-16
Hysteresis parameter 4-41
I
identity networking
overview 5-72
IDS 5-99
IDS sensors
configuring
described 5-99
IDS signature events
viewing using the CLI5-114to 5-115
viewing using the GUI5-110to 5-112
IDS signatures
configuring
described 5-104
frequency 5-110
measurement interval 5-110
pattern 5-110
tracking method 5-110
uploading or downloading using the GUI5-106to 5-108
viewing
IGMP Timeout parameter 4-36
IKE Diffie Hellman Group parameter 5-10
IKE Phase 1 parameter 5-10
Index parameter for IDS 5-100
infrastructure MFP
components 5-65
described 5-64
Infrastructure MFP Protection parameter 5-67
Infrastructure Protection parameter 5-68
Infrastructure Validation parameter 5-68
Ingress Interface parameter 9-27
Injector Switch MAC Address parameter 7-63
inline power 7-61
intelligent power management (IPM) 7-63
inter-controller roaming
described 4-39
example 11-3
Interface Name parameter 6-44, 6-52, 6-54
Interface parameter 6-8
interfaces
and identity networking 5-74
assigning WLANs 6-13
configuring
Interfaces > Edit page
applying an ACL to an interface 5-58
configuring dynamic interfaces 3-17
configuring NAC out-of-band integration 6-53
configuring wired guest access 9-26
creating multiple AP-manager interfaces 3-37
Interfaces > New page 3-16, 3-37
Interfaces page 3-11
interference 10-3
Interference threshold parameter 10-17
Internet Group Management Protocol (IGMP)
configuring
using the CLI 4-37
using the GUI 4-36
snooping 4-33
inter-subnet mobility 11-7
inter-subnet roaming
described 4-39
Interval parameter 10-13, 10-37
intra-controller roaming
described 4-39
illustrated 11-2
Inventory page 7-53
Invoke Channel Update Now button 10-13
Invoke Power Update Now button 10-11
IP Mask parameter 4-26
IPSec parameter 5-9
IPv6 bridging
configuring
using the CLI 6-37
described 6-35
guidelines 6-35
IPv6 bridging and IPv4 web authentication example 6-36
IPv6 Enable parameter 6-37
J
Japanese country codes 7-47
Japanese regulations for migrating access points from the -J to the -U regulatory domain7-46to 7-49
K
Keep Alive Count parameter 11-22
Keep Alive Interval parameter 11-22
Key Encryption Key (KEK) parameter 5-8
Key Format parameter 6-24
Key Index parameter 6-24
key permutation
described 6-23
Key Permutation parameter 6-24
Key Size parameter 6-24
Key Wrap Format parameter 5-8
Key Wrap parameter 5-8
L
LAG. See link aggregation (LAG)
LAG Mode on Next Reboot parameter 3-32
Last Auto Channel Assignment parameter 10-14
Last Power Level Assignment parameter 10-11
Layer 1 security 5-2
Layer 2
LWAPP discovery 7-2
operation 1-6
security
described 5-2
Layer 2 Security parameter 6-21, 6-24, 6-48
Layer 3
LWAPP discovery 7-2
operation 1-6
security
described 5-3
Layer 3 Security parameter
for VPN passthrough 6-27
for web authentication 6-28
for web redirect 6-48
for wired guest access 9-28
LDAP
choosing server priority order 5-34
configuring
local EAP methods supported 5-32, 5-38
LDAP server
choosing local authentication bind method
using the CLI 5-36
using the GUI 5-33
LDAP Servers > New page 5-32
LDAP Servers page 5-32
LDAP Servers parameter 5-44
LEAP parameter 5-41
Lease Time parameter 6-10
LEDs
configuring 7-65
interpreting D-2
Lifetime parameter 5-30, 9-5, 12-10
Lightweight Access Point Protocol (LWAPP) 7-2
lightweight mode, reverting to autonomous mode 7-15
link aggregation (LAG)
configuring neighboring devices 3-33
enabling
using the CLI 3-33
using the GUI 3-32
example 3-29
guidelines 3-31
illustrated 3-30
verifying settings using the CLI 3-33
link latency
configuring
using the CLI 7-60
described 7-58
Link Status parameter 3-20
Link Test
button 7-56
option 7-56
page 7-57
link test
described 7-55
performing
using the CLI 7-57
types of packets 7-55
Link Trap parameter 3-21
Load-based AC parameter 4-53
load-based CAC
enabling
using the CLI 4-60
using the GUI 4-53
lobby ambassador account
creating using the CLI 9-3
creating using the GUI9-2to 9-3
Lobby Ambassador Guest Management > Guest Users List > New page 9-4
Lobby Ambassador Guest Management > Guest Users List page 9-4, 9-6
local EAP
configuring
debugging 5-48
example 5-38
viewing information using the CLI 5-47
Local EAP Authentication parameter 5-43
Local EAP Profiles > Edit page 5-41
Local EAP Profiles page 5-40
Local Management Users > New page 9-3
Local Management Users page 9-2
Local Mode AP Fast Heartbeat Timeout parameter 7-34
Local Mode AP Fast Heartbeat Timer parameter 7-33
Local Net Users > New page 5-30, 12-9
Local Net Users page 5-29, 9-6
local network users
configuring using the CLI 5-31
configuring using the GUI5-28to 5-31
local user database, capacity 9-2
location
calibration 10-37
viewing settings using the CLI4-83to 4-86
location appliance
installing certificate4-81to 4-82
synchronizing with controller 4-83
location-based services 10-36
location presence 4-84
logical connectivity diagram
Catalyst 3750G Integrated Wireless LAN Controller Switch E-4
Cisco 28/37/38xx Integrated Services Router E-3
Cisco WiSM E-2
logs
long preambles
described 5-49
enabling on SpectraLink NetLink phones
using the CLI 5-50
using the GUI 5-49
LWAPP-enabled access points
configuring a static IP address 7-25
debug commands 7-22
disabling the reset button 7-24
enabling memory core dumps 7-24
guidelines 7-14
Layer 2 discovery 7-2
MAC addresses displayed on controller GUI 7-24
receiving debug commands from controller 7-22
reverting to autonomous mode7-15to 7-16
sending crash information to controller 7-23
sending radio core dumps to controller 7-23
sending SSCs to controller 7-16
M
MAC address of access point, displayed on controller GUI 7-24
MAC filtering
configuring on WLANs6-12to 6-13
DTIM period 6-13
management frame protection (MFP)
configuring
debugging 5-71
guidelines 5-65
types 5-64
Management Frame Protection parameter 5-68
Management Frame Protection Settings page 5-68
management frame validation 5-65
management interface
configuring
using the CLI 3-13
described 3-6
management over wireless
described 5-51
enabling
using the CLI 5-51
using the GUI 5-51
Master Controller Configuration page 7-3
Master Controller Mode parameter 7-3
Max Age parameter 3-26
Maximum Age parameter 3-27
maximum local database entries
configuring using the CLI 5-116
configuring using the GUI 5-115
Maximum Local Database Entries parameter 5-29, 5-116
Maximum RF Usage Per AP parameter 4-45
Max RF Bandwidth parameter 4-53, 4-54
MCS data rates 4-18
Member MAC Address parameter 11-12
memory
core dumps from converted access points 7-24
types 1-15
mesh access points 7-12
Message Authentication Code Key (MACK) parameter 5-8, 5-12
message logs
configuring
using the GUI D-7
viewing
using the CLI D-13
See also system logging
Message Logs page D-10
Message parameter for web authentication 9-10
Metrics Collection parameter 4-53
MFP Client Protection parameter 5-67
MFP Frame Validation parameter 5-67
migrating access points from the -J to the -U regulatory domain7-46to 7-49
Min Failed Client Count per AP parameter 10-16
Minimum RSSI parameter 4-41
mirror mode. See port mirroring, configuring
MMH MIC
described 6-23
MMH Mode parameter 6-24
Mobile Announce messages 11-7
mobility
failover 11-20
overview 11-2
Mobility Anchor Config page 11-22, 11-27
Mobility Anchor Create button 11-23
mobility anchors. See auto-anchor mobility
Mobility Anchors option 11-22
Mobility Anchors page 11-22, 11-26
Mobility Group Member > New page 11-11
Mobility Group Members > Edit All page 11-13
mobility groups
configuring
using the CLI 11-14
using the configuration wizard 4-5
with one NAT device 11-8
with two NAT devices 11-9
determining when to include controllers 11-7
difference from RF groups 10-5
examples 11-7
illustrated 11-5
messaging among 11-7
number of access points supported 11-5, 11-6
number of controllers supported 11-5
using with NAT devices11-8to 11-9
mobility group statistics
types 11-16
viewing
using the CLI 11-19
mobility list
described 11-6
detecting failed members 11-20
number of controllers supported 11-7
ping requests to members 11-20
Mobility Multicast Messaging > Edit page 11-14
Mobility Multicast Messaging page 11-13
mobility ping tests, running 11-29
mobility services information, viewing 4-86
Mobility Statistics page 11-17
MODE access point button 7-15, 7-24
monitor intervals, configuring using the GUI 10-18
Multicast Appliance Mode parameter 3-21
multicast groups
viewing using the CLI 4-38
viewing using the GUI 4-36
Multicast Groups page 4-36
multicast mode
configuring
using the CLI 4-37
Multicast page 4-36
multiple country codes
configuration guidelines 7-41
configuring
using the CLI 7-44
multiple country support, using the configuration wizard 4-5
N
NAC in-band mode 6-50
NAC out-of-band integration
and hybrid REAP 12-5
configuring
diagram 6-51
NAC State parameter 6-54
NAT devices in mobility groups11-8to 11-9
Native VLAN ID parameter 12-12
Neighbor Packet Frequency parameter 10-18
Netbios Name Servers parameter 6-10
Netmask parameter 6-10
network analyzer supported software
AirMagnet D-35
Airopeek D-35
Omnipeek D-35
Wireshark D-35
Network Mobility Services Protocol (NMSP) 4-77
active connections 4-85
modifying the notification interval for clients, RFID tags, and rogues 4-82
viewing counters 4-85
Network parameter 6-10
notes xxi
NTP server
configuring to obtain time and date 4-10
setting in the configuration wizard 4-6
Number of Hits parameter 5-57
O
online help, using 2-2
open source terms C-8
OpenSSL license issuesC-6to C-8
operating system
software 1-5
organization of documentxxto xxi
Override Global Config parameter 9-21, 9-28
Over-ride Global Credentials parameter 7-6, 7-10
Override Interface ACL parameter 5-60
oversized access point images 7-25
over-the-air provisioning (OTAP) 7-2
P
P2P Blocking parameter 6-17
password guidelines 7-9
Password parameter
for access point authentication 7-9
for access points 7-5
for local net users 5-30, 12-10
for PACs 8-15
password recovery mechanism 4-23
PEAP parameter 5-41
peer-to-peer blocking
configuring
described 6-15
examples 6-16
Physical Mode parameter 3-21
Physical Status parameter 3-20
pico cell mode
configuring
using the CLI 10-44
debugging using the CLI 10-45
guidelines 10-41
versions 10-42
Pico Cell Mode parameter 10-42
ping link test 7-55
ping tests 11-29
PMK cache lifetime timer 6-22
PMKID caching 6-22
PoE Status parameter 7-62
Pool End Address parameter 6-10
Pool Start Address parameter 6-10
Port > Configure page 3-20
port mirroring, configuring3-22to 3-23
Port Number parameter
for controller 3-20
for LDAP server 5-33
for RADIUS server 5-8
for TACACS+ server 5-23
for wired guest access 9-26
Port parameter for IDS 5-100
ports
on 2100 series controllers 3-2, 3-3, 3-4
on 4400 series controllers 3-2, 3-3, 3-4
on Catalyst 3750G Integrated Wireless LAN Controller Switch 3-3, 3-5
on Cisco 28/37/38xx Series Integrated Services Router3-3to 3-4, 4-88, 7-19
Ports page 3-19
Power Assignment Leader parameter 10-11
Power Injector Selection parameter 7-63
Power Injector State parameter 7-63
Power Neighbor Count parameter 10-11
Power over Ethernet (PoE)
configuring
using the CLI 7-64
Power Over Ethernet (PoE) parameter 3-21
Power Threshold parameter 10-11
preauthentication access control list (ACL)
applying to a WLAN
using the CLI 5-63
for external web server 9-16, 12-9
Preauthentication ACL parameter 5-61, 6-48
Pre-Standard State parameter 7-63
Primary Controller parameters 7-35
Primary RADIUS Server parameter 12-17
priming access points 7-2
Priority Order > Local-Auth page 5-34
Priority Order > Management User page 5-11, 5-24
Priority parameter 3-27
Privacy Protocol parameter 4-28
Profile Details page D-24
Profile Name parameter 6-4, 9-27, 12-7
protected access credentials (PACs)
overview 8-14
uploading
using the CLI 8-16
using the GUI 8-15
using with local EAP 5-39, 12-20
Protection Type parameter 5-66, 10-34
Protocol parameter 5-55
Protocol Type parameter 4-45
PSK
configuring 6-21
described 6-20
PSK Format parameter 6-21
public key cryptography (PKC), with mobility 11-7
purpose of document xx
Q
QBSS
configuring
using the CLI 6-33
described 6-31
guidelines 6-31
QoS
identity networking 5-73
translation values 6-29
with CAC 4-50
QoS profiles
assigning to a WLAN
using the CLI 6-30
configuring
QoS roles
assigning for use with hybrid REAP 12-10
configuring
QoS Roles for Guest Users page 4-47
Quality of Service (QoS) parameter 6-30
quarantined VLAN
using 12-8
with hybrid REAP 12-4
with NAC out-of-band integration 6-53
Quarantine parameter
for dynamic interface 3-17
for management interface 3-11
NAC out-of-band integration 6-53
Query Interval parameter 5-101
Queue Depth parameter 4-45
R
radio core dumps 7-23
radio measurement requests
configuring
on the CLI 10-38
on the GUI 10-37
overview 10-36
viewing status using the CLI 10-39
radio preamble 5-49
radio resource management (RRM)
benefits 10-5
CCX features. SeeCCX radio management
configuring
monitor intervals using the GUI 10-18
using the configuration wizard 4-6
coverage hole detection
configuring using the CLI 10-21
configuring using the GUI10-15to 10-16
described 10-4
debugging 10-24
disabling dynamic channel and power assignment
using the CLI 10-32
using the GUI 10-32
overview 10-2
specifying channels10-12to 10-14
statically assigning channel and transmit power settings
using the CLI 10-29
viewing using the CLI10-22to 10-23
Wireless > 802.11a/n (or 802.11b/g/n) > RRM > TPC parameter 10-10
radio resource monitoring 10-2
RADIUS
accounting 5-3
authentication 5-3
configuring
configuring on ACS 5-4
described 5-3
FIPS standard 5-11
KEK parameter 5-12
MACK parameter 5-12
server fallback behavior 5-10
using with hybrid REAP 12-15
Redirect URL After Login parameter 9-10
Refresh-time Interval parameter 4-69
regulatory information
for 2100 series controllers B-8
for 4400 series controllers B-9
for lightweight access pointsB-2to B-8
related publications xxiii
Remote Authentication Dial-In User Service. See RADIUS
Reserved Roaming Bandwidth parameter 4-53, 4-54
Reset Link Latency button 7-59
resetting the controller 8-22
Re-sync button 5-103
reverse path filtering (RPF) 11-26
RF Channel Assignment parameter 10-32
RF domain. See RF groups
RF exposure declaration of conformity B-5
RF group leader
described 10-5
viewing 10-8
RF group name
described 10-6
entering 10-7
RF groups
configuring
using the CLI 10-7
using the configuration wizard 4-5
using the GUI 10-6
difference from mobility groups 10-5
viewing status
using the CLI 10-9
using the GUI 10-8
RFID tags
described 4-76
formats supported 4-76
number supported per controller 4-77
tracking
configuring using the CLI 4-78
debugging using the CLI 4-80
viewing information using the CLI4-79to 4-80
RF-Network Name parameter 10-7
RLDP. See Rogue Location Discovery Protocol (RLDP)
roaming and real-time diagnostics
configuring using the CLID-27to D-30
described D-15
logs
described D-15
roam reason report 4-40
rogue access points
alarm 10-34
classification mapping table 5-80
classifying 5-79
detecting
using the CLI 10-35
managing 5-78
RLDP support 5-79
rule-based classification support 5-79
tagging, location, and containment 5-79
viewing and classifying
WCS support for rule-based classification 5-82
Rogue AP Detail page 5-91
Rogue AP Ignore-List page 5-94
rogue classification rules
configuring using the CLI5-87to 5-90
configuring using the GUI5-84to 5-87
Rogue Client Detail page 5-92
Rogue Location Discovery Protocol (RLDP)
configuring
using the CLI 5-83
defined 5-79
Rogue Location Discovery Protocol parameter 5-82
Rogue Rule > Edit page 5-86
Rogue Rules > Priority page 5-87
Role Name parameter 4-47
root bridge 3-23
Root Cost parameter 3-26
Root Port parameter 3-26
RRM. See radio resource management (RRM)
RSNA logs
described D-16
Rx Sensitivity Threshold parameter 10-43
S
Save and Reboot button 8-10, 8-13
saving configuration settings 8-21
Scan Threshold parameter 4-41
Scope Name parameter 6-9
Search Clients page 7-67
Secondary Controller parameters 7-35
Secondary RADIUS Server parameter 12-17
secure web mode
described 2-2
enabling
using the CLI 2-4
using the GUI 2-3
security
overview 5-2
Security Policy Completed parameter 6-36
Select APs from Current Controller parameter 12-18
self-signed certificate (SSC)
LWAPP-enabled access points sending to controller 7-16
used to authorize access points 7-16
Sequence parameter 5-55
serial port
baud rate setting 2-8
connecting 2-7
timeout 2-8
Server Address parameter 5-100
Server Index (Priority) parameter 5-8, 5-23, 5-33
Server IP Address parameter
for LDAP server 5-33
for RADIUS server 5-8
for TACACS+ server 5-23
for wireless sniffer D-37
Server Key parameter 5-43, 12-20
Server Status parameter 5-9, 5-23
Server Timeout parameter 5-9, 5-24, 5-34
service port 3-5
service-port interface
configuring
using the CLI 3-15
using the configuration wizard 4-4
described 3-8
session timeout
configuring
using the CLI 6-26
using the GUI 6-25
described 6-25
Set to Factory Default button 10-18
Severity Level Filtering parameter D-8
Shared Secret Format parameter 5-8, 5-23
Shared Secret parameter 5-8, 5-23
Short Preamble Enabled parameter 5-49
short preambles 5-49
Show Wired Clients option 7-30
shunned clients
described 5-102
viewing
using the CLI 5-103
using the GUI 5-103
Signature Events Detail page 5-111
Signature Events Summary page 5-110
Signature Events Track Detail page 5-112
Simple Bind parameter 5-33
sniffing. See wireless sniffing D-35
Sniff parameter D-36
SNMP community string
changing default values using the CLI4-26to 4-27
changing default values using the GUI4-25to 4-26
SNMP v1 / v2c Community > New page 4-26
SNMP v1 / v2c Community page 4-25
SNMP v3 users
changing default values using the CLI 4-28
changing default values using the GUI4-27to 4-28
SNMP V3 Users > New page 4-28
SNMP V3 Users page 4-27
software, upgrading
Source parameter for ACLs 5-55
Source Port parameter 5-56
Spanning Tree Algorithm parameter 3-27
Spanning Tree Protocol (STP)
configuring
described 3-23
spanning-tree root 3-23
Spanning Tree Specification parameter 3-26
SpectraLink NetLink phones
enabling long preambles
using the CLI 5-50
using the GUI 5-49
overview 5-49
Spectralink Voice Priority parameter 4-65
splash page web redirect 6-46
Splash Page Web Redirect parameter 6-48, 6-49
SSC key-hash on Cisco WiSM 7-14
SSH, troubleshooting access points D-38
SSID
configuring
using the CLI 6-5
using the GUI 6-4
described 6-3
SSL certificate
generating
using the CLI 2-4
using the GUI 2-3
loading
SSL protocol 2-2
Standard Signature > Detail page 5-109
Standard Signatures page 5-108
Static Mobility Group Members page 11-11
Status parameter
for DHCP scopes 6-10
for guest LANs 9-27
for SNMP community 4-26
for WLANs 6-5
STP Mode parameter 3-25
STP Port Designated Bridge parameter 3-24
STP Port Designated Cost parameter 3-24
STP Port Designated Port parameter 3-24
STP Port Designated Root parameter 3-24
STP Port Forward Transitions Count parameter 3-24
STP Port ID parameter 3-24
STP Port Path Cost Mode parameter 3-25
STP Port Path Cost parameter 3-25
STP Port Priority parameter 3-25
STP State parameter 3-24
strong passwords 7-9
Supervisor 720
described 4-86
switch, configuring at the remote site12-5to 12-6
Switch IP Address (Anchor) parameter 11-23
SX/LC/T small form-factor plug-in (SFP) modules 3-4
symmetric mobility tunneling
configuring
using the CLI 11-28
using the configuration wizard 4-5
illustrated 11-26
Symmetric Mobility Tunneling Mode parameter 11-27
syslog
described D-16
levels D-9
Syslog Configuration page D-7
Syslog Facility parameter D-8
syslog server
number supported by controller D-8
removing from controller D-8
severity level filtering D-8
Syslog Server IP Address parameter D-8
system logging
configuring
setting severity level D-9
system logs, viewing using the CLI D-13
T
TACACS+
accounting 5-18
authentication 5-17
authorization 5-17
choosing authentication priority order 5-11, 5-24
configuring
viewing administration server logs5-26to 5-28
TACACS+ (Authentication, Authorization, or Accounting) Servers > New page 5-23
TACACS+ (Authentication, Authorization, or Accounting) Servers page 5-22
TACACS+ (Cisco) page (on CiscoSecure ACS) 5-20
TACACS+ Administration .csv page (on CiscoSecure ACS) 5-27, 5-28
telemetry 4-76
Telnet, troubleshooting access points D-38
terminal emulator settings 2-8
Tertiary Controller parameters 7-35
text2pcap sample output D-33
TFTP server guidelines 8-2
time, configuring
using the CLI 4-11
using the GUI 4-10
using the NTP server 4-10
time-length-values (TLVs), supported for CDP 4-67
timeout, configuring for disabled clients 6-13
Time Since Topology Changed parameter 3-26
timestamps, enabling or disabling in log and debug messages D-13
Time to Live for the PAC parameter 5-43, 12-20
time zone
configuring using the CLI 4-12
configuring using the GUI 4-11
TKIP
described 6-19
parameter 6-21
Topology Change Count parameter 3-26
traffic specifications (TSPEC) request
described 4-51
examples 4-51
traffic stream metrics (TSM)
configuring
using the CLI 4-61
using the GUI 4-53
described 4-52
viewing statistics
Transfer Mode parameter
downloading a CA certificate 8-12
downloading a configuration file 8-19
downloading a customized web authentication login page 9-18
downloading a device certificate 8-10
upgrading controller software 8-5
uploading a configuration file 8-17
uploading a PAC 8-15
Transition Time parameter 4-42
transmit power
statically assigning using the CLI 10-29
statically assigning using the GUI10-25to 10-29
transmit power levels 10-28
Transmit Power parameter 10-43
transmit power threshold, decreasing 10-19
troubleshooting
access point join process7-19to 7-22
using Telnet or SSH D-38
tunnel attributes and identity networking 5-75
Tx Power Level Assignment parameter 10-32
Type parameter 6-4, 9-27, 12-7
U
U-APSD
described 4-52
viewing status
using the CLI 4-63
using the GUI 4-56
UDP, use in RADIUS 5-4
unicast mode 4-33
unique device identifier (UDI)
described 7-53
retrieving
using the CLI 7-55
Upload File from Controller page 8-15, 8-17
URL parameter 9-17
Use AES Key Wrap parameter 5-7
User Access Mode parameter 9-3
user accounts, managing9-1to 9-20
User Attribute parameter 5-33
User Base DN parameter 5-33
User Credentials parameter 5-34
User Name parameter 5-30, 12-10
Username parameter 7-5, 7-9, 7-10
User Object Type parameter 5-33
User parameter 8-15
User Profile Name parameter 4-28
V
Validity parameter 8-15
VCI strings 7-18
Verify Certificate CN Identity parameter 5-42
video settings
configuring
using the CLI 4-61
viewing
virtual interface
configuring
using the CLI 3-14
using the configuration wizard 4-5
VLAN Identifier parameter
for AP-manager interface 3-12
for dynamic interface 3-16, 3-17
for management interface 3-11
VLAN interface. See dynamic interface
VLAN Mappings
button 12-13
page 12-13
VLANs
described 3-8
guidelines 3-10
VLAN Support parameter 12-12
VLAN tag, and identity networking 5-74
Voice & Video Optimized parameter 4-65
Voice Optimized parameter 4-65
voice-over-IP (VoIP) telephone roaming 4-39
Voice RSSI parameter 10-16
voice settings
configuring
viewing
VPN Gateway Address parameter 6-27
VPN passthrough
configuring using the CLI 6-27
configuring using the GUI 6-27
W
warnings
webauth.tar files 9-21
webauth bundle 9-17
web authentication
configuring a WLAN for
using the CLI 6-28
using the GUI 6-28
described 9-7
successful login page 9-9
web authentication login page
assigning per WLAN
using the CLI 9-22
using the GUI 9-21
choosing the default
customized example 9-20
customizing from an external web server
using the CLI 9-17
default 9-8
downloading a customized login page
guidelines 9-17
using the CLI 9-19
modified default example 9-13
verifying settings using the CLI 9-20
Web Authentication option 9-28
Web Authentication Type parameter 9-10, 9-17, 9-19
Web Auth Type parameter 9-21, 9-28
web-browser security alert 9-7
web mode
configuring
using the CLI 2-4
using the GUI 2-3
described 2-2
Web Passthrough option 9-28
Web Policy parameter 5-61, 6-48
web redirect 6-46
Web Server IP Address parameter 9-17
WEP keys, configuring 6-18
WGB parameter 7-29
WGB Wired Clients page 7-30
wired guest access
configuration overview 9-25
configuring
guidelines 9-25
one-controller example 9-24
two-controller example 9-24
wireless sniffing
configuring
using the CLI D-37
prerequisites D-35
supported software D-35
WLAN override
configuring using the CLI 6-41
configuring using the GUI6-40to 6-41
WLAN Override parameter 6-40
WLAN Profile parameter 5-30, 12-10
WLANs
assigning web login, login failure, and logout pages
using the CLI 9-22
using the GUI 9-21
checking security settings 6-19
configuring
conditional web redirect6-46to 6-49
static and dynamic WEP 6-19
connecting clients to 12-14
creating
using the CLI 6-5
deleting
using the CLI 6-5
using the GUI 6-4
described1-12, 3-9to 3-10, 6-3
session timeout
configuring 6-25
described 6-25
splash page web redirect 6-46
using the same SSID 6-3
wired security solution 1-6
WLANs > Edit (Advanced) page
applying an ACL to a WLAN 5-60
configuring AAA override 5-78
configuring infrastructure MFP for a WLAN 5-67
configuring IPv6 bridging 6-37
configuring NAC out-of-band integration 6-54
configuring the diagnostic channel D-16
WLANs > Edit (QoS) page 6-32
WLANs > Edit (Security > AAA Servers) page
assigning LDAP servers to a WLAN 5-35
choosing RADIUS or LDAP servers for external authentication 9-21
disabling accounting servers on a WLAN 6-49
enabling local EAP on a WLAN 5-43
WLANs > Edit (Security > Layer 2) page 6-21, 6-24
WLANs > Edit (Security > Layer 3) page
applying a preauthentication ACL to a WLAN 5-61
configuring a WLAN for VPN Passthrough 6-27
configuring web redirect 6-48
configuring wired guest access 9-28
WLANs > Edit page 6-4, 9-27, 12-7
WLANs > New page 6-4, 9-27, 12-7
WLAN SSID parameter
configuring for guest user 9-5
creating a centrally switched WLAN 12-7
creating WLANs 6-4
identifying the guest LAN 9-27
mapping an access point group to a WLAN 6-44
WMM
described 6-31
with CAC 4-50
WMM parameter 4-65
WMM Policy parameter 6-32
workgroup bridges (WGBs)
debugging 7-32
described 7-26
guidelines 7-26
illustrated 7-26
sample configuration 7-29
viewing status
using the CLI 7-31
WPA1+WPA2
configuring
using the CLI 6-21
described 6-19
WPA2 Policy parameter 6-21
WPA Policy parameter 6-21