Table Of Contents
Basic Setup—CiscoWorks 1105/1130/1130-19
Initial Setup Quick Reference
Configuring the WLSE's Network Information
Guidelines for Using the Setup Program
Running the Setup Program
Changing the Configuration After Running Setup
Configuring Name Resolution
Configuring the WLSE Without a DNS Server
Verifying the Configuration
Configuring the Web Browser
Supported Browsers
Configuring Internet Explorer
Configuring Netscape Navigator
Logging into the Web Interface and Verifying Connectivity
Adding Users
Next Steps—Set Up Devices and Configure Device Management
Basic Setup—CiscoWorks 1105/1130/1130-19
This chapter describes how to run the setup program and perform basic configuration for WLSE 2.7 software.
Initial Setup Quick Reference
Table 4-1 provides a high-level overview of the basic initial setup of the WLSE.
Configuring the WLSE's Network Information
Use the setup program to configure the WLSE when you boot it for the first time, and after erasing the configuration.
Guidelines for Using the Setup Program
When using the setup program:
•
Press the Backspace or Delete key to delete characters when entering a response to a prompt.
•You cannot edit a response after you press the Enter key. You can use CLI commands to change some responses after running setup; see Changing the Configuration After Running Setup.
•Exit the setup program in two ways:
–Press Ctrl-c.
The login prompt appears. Log in as the user setup to rerun the setup program.
–Enter no at the final prompt:
Would you like to save this configuration? [yes].
The setup program exits without saving the configuration, then restarts.
See Table 4-2 and Table 4-3 for the data you will need to enter into the setup prompts.
Running the Setup Program
To configure WLSE network information, perform the following steps:
Step 1 Connect a console to the serial/console port on the back panel.
•For the CiscoWorks 1105, use the serial port on the front panel. Do not use the serial port on the back panel as a console port.
•For the CiscoWorks 1130 or 1130-19, use the serial port on the back panel.
Note If you are using a Windows terminal emulator as a console, it is recommended that you use the Windows Hyper Terminal application.
Step 2 Power on the WLSE.
When the system finishes booting, a login prompt appears on the console.
Step 3 At the login prompt, enter setup.
When you boot the system for the first time, it is not configured. Logging in as setup allows you to configure the system.
Step 4 Enter responses to the first set of prompts to configure the WLSE's connectivity. Table 4-2 describes how to respond to the prompts. After each response, press Enter to proceed to the next prompt.
Table 4-2 General Configuration
Prompt
|
Response Description
|
Sample Response
|
host name:
|
System host name.
|
SolutionEngine
|
domain name:
|
System domain name.
|
cisco.com
|
<username> password:
|
Sets the password for the default user admin. Characters you type do not appear on screen.
Note Default user admin is reserved and cannot be deleted or changed.
You can use the admin password to log into the Web interface and and to connect via Telnet/SSH.
Password length is unlimited, and you can use the alphanumeric characters (A-Z, a-z, 0-9) plus the underscore(_). Passwords are case sensitive.
|
wq1Cvu2pl
|
confirm password:
|
eth0 IP address:
|
IP address of Ethernet 0 interface.
|
209.165.200.224
|
eth0 network mask:
|
Network mask of Ethernet 0 interface.
|
255.255.255.224
|
default gateway IP address:
|
IP address of default router.
|
209.165.200.224
|
DNS server IP address:
|
IP address of DNS server for name/address resolution. The setup program does not validate the IP address you enter.
If you are not using a DNS server, see Configuring the WLSE Without a DNS Server before proceeding.
|
209.165.201.1
|
Would you like to save this configuration? [yes]:
|
•Enter yes to save the configuration. The configuration is saved and system reboots.
•Enter no to exit without saving configuration and run setup program again.
|
|
Step 5 Answer the next set of prompts to create a self-signed certificate as described in Table 4-3. This certificate will allow you to access the WLSE securely, using HTTPS, until you are able to obtain a certificate from a certificate authority (CA). To make changes in the certificate after running setup, see Changing the Configuration After Running Setup.
The certificate expires after one year. To obtain a permanent, signed certificate, see the SSL instructions in the online help or in the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Table 4-3 Self-Signed Certificate Creation
Prompt
|
Response Description
|
Sample Response
|
|
2-character code.
|
US
|
|
Full name of a state or province.
|
Snake Desert
|
|
City or locality name.
|
Snake Town
|
|
Company name.
|
Snake Oil, LTD.
|
|
Unit of the company that is using the WLSE.
|
Webserver Team
|
|
Fully qualified domain name (FQDN).
|
www.snakeoil.com
|
|
Email address.
|
www@snakeoil.com
|
Step 6 After you finish configuring the WLSE, it will reboot. After it finishes rebooting, set up your mail server to send mail to external domains by entering the following command:
mailroute {hostname | ip-address}
where hostname is the hostname of the SMTP server and ip-address is the IP address of the SMTP server. If you do not set the mail server, email can only be sent to the local domain. For more information about this command, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Note You can also set up the mail server after you log in to the Web interface. See the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Changing the Configuration After Running Setup
To change the information in the setup configuration, use the following CLI commands at any time. For more information about CLI commands, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
You can use CLI commands by connecting to the WLSE through the console or by using Telnet or SSH. Log in initially as the admin user, using the password you created during setup.
•To change the host name, use the hostname command.
•To change the domain name, use the ip-domain-name command.
•To change the DNS server, or add up to 2 additional DNS servers, use the ip name-server command.
•To configure or reconfigure an Ethernet port, use the interface command.
•To make changes in the HTTPS certificate, use the mkcert command.
Tip To change any other part of the WLSE's initial configuration, use the erase config command to erase the previous configuration, and rerun the setup program.
Configuring Name Resolution
The WLSE resolves host names by using a Domain Name System (DNS) server, or you can use the import CLI command to add individual hosts or a UNIX-style hosts file. For information on this command, see User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
If you are using a DNS server, register the WLSE on the DNS server, using the WLSE's host name as its DNS name.
Configuring the WLSE Without a DNS Server
The WLSE does not require name resolution, but if name resolution is not used, the following problems will occur:
•Host names will not resolve.
•Discovery will be slow.
•Connecting to the WLSE via Telnet will be slow. You will be able to connect to the WLSE only after name resolution on the client times out.
•Ping and traceroute commands will result in 100% packet losses in 4 out of 5 ICMP packets. This occurs because the WLSE times out when attempting reverse DNS lookup.
•IP addresses will appear instead of hostnames in WLSE displays.
•You will not be able to download access point firmware directly from Cisco.com to the WLSE.
If you are not using a DNS server, perform the steps described in Configuring the WLSE's Network Information, with the following exception:
Step 1 At the DNS server ip address prompt, enter any IP address.
Step 2 After you finish configuring the WLSE, erase the IP address you entered by entering the following command:
no ip name-server ip-address
where ip-address is the IP address you entered at the DNS server ip address: prompt in the setup program. For more information about this command, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Verifying the Configuration
While at the console, verify that the WLSE is correctly configured by performing the following steps.
For more information on the CLI commands used in the following procedure, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Step 1 At the system console, enter admin at the login prompt, and log in with the password you created during setup. You can also use Telnet or SSH to log in as the admin user.
Note For security reasons, Telnet is disabled on the WLSE by default. If you want to connect to the CLI interface using Telnet, you can enable it by selecting Administration > Appliance > Security > SSH and Telnet. Then select enable and click Configure to save the change.
Step 2 If you are using a DNS server, enter the following command to verify that the WLSE can obtain DNS services from the network:
# nslookup dns-name
where dns-name is the DNS name of a host that is registered in DNS. If the system cannot obtain the IP address of the host from DNS, use the ip name-server command to specify a working DNS server.
Step 3 Enter the following command to verify that the system can communicate with the network:
# ping ip-address
where ip-address is the IP address of a host that is accessible on the network. A DNS server is a recommended host to ping because it should always be running and accessible
Step 4 Enter the show config command to verify that the configuration is as you expected. For more information on this command, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Step 5 Enter the show clock command to verify that the system time and date are correct in Coordinated Universal Time (UTC).
•If the time or date is incorrect, set the correct time and date using the clock command.
•If your network uses NTP, configure the system to use NTP to set the clock.
Step 6 Enter the exit command to log out.
You are now finished using the console. The remaining steps take place at the client system.
Configuring the Web Browser
Normally, all WLSE tasks are performed in the Web interface. Before you connect to the Web interface, make sure you are using a supported browser and that the browser is properly configured.
•Supported Browsers
•Configuring Internet Explorer
•Configuring Netscape Navigator
Supported Browsers
Before connecting to the WLSE web interface, make sure you are using a supported browser and the browser is properly configured. The supported browsers for WLSE 2.7 are listed in Table 4-4. Use the procedures in Configuring Internet Explorer or Configuring Netscape Navigator to configure the browser.
Note Using earlier, unsupported versions of Internet Explorer compromises the security of the WLSE.
Table 4-4 Supported Browsers
Client Operating System
|
Supported Browsers
|
Windows 2000, Windows NT, and Windows XP
|
Microsoft Internet Explorer 6.0 with Service Pack 1
Netscape Navigator 7.02
|
Japanese Windows 2000, Windows NT, and Windows XP
|
Japanese Microsoft Internet Explorer 6.0 with Service Pack 1
Japanese Netscape Navigator 7.02
|
Solaris 8 and 9
|
Netscape Navigator 7.01
|
Java Plug-in
|
1.4.1
Note Java Plug-in is required for some WLSE functions.
|
Configuring Internet Explorer
To configure Internet Explorer 6.0, perform the following steps:
Step 1 Select Tools > Internet Options.
Step 2 Enable JavaScript:
a. Select Security.
b. Make sure that the Internet icon is selected, and click Custom Level.
c. Scroll to Scripting and select the following:
–Select Enable for Active scripting.
–Select Enable for Allow paste operations via script.
–Select Enable for Scripting of Java applets.
d. Click OK.
Step 3 Configure the browser to accept all cookies:
a. Select Privacy.
b. Move the slider down to until "Accept all Cookies" appears.
c. Click OK.
Step 4 Change the default font to improve readability:
a. Select General. Then elect Fonts.
b. Select a sans-serif font (for example, Arial) from the Web page font and Plain text font lists.
c. Click OK, then click OK again.
The text in the browser window is redrawn using the new fonts. Not all of the fonts will change after this user-defined font option is set.
Step 5 Disable caching:
a. Select General. Then s elect Settings.
b. Under "Check for newer versions of stored pages," select Every visit to the page.
Step 6 Click OK.
Note Windows XP does not come with the Java Plug-in installed on Internet Explorer 6.0. This causes problems when upgrading a WLSE to 2.5 software. If you plan to use a Windows XP client or server to update WLSE software, configure the browser as described in the procedure for creating a remote repository in the online help or in the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
Configuring Netscape Navigator
To configure Netscape Navigator 7.01 or 7.02, perform the following steps:
Step 1 Select Edit > Preferences.
Step 2 Enable JavaScript:
a. Expand Advanced and select Scripts & Plugins.
b. Under "Enable JavaScript for," select Navigator.
c. Click OK.
Step 3 Configure Netscape Navigator to accept all cookies:
a. Expand Privacy & Security and select Cookies.
b. Select Enable all cookies.
c. Click OK.
Step 4 Change the default font for improved readability:
a. Expand Appearance and select Fonts.
b. From the Proportional list, select Sans Serif and a font size.
c. From the Sans-serif list, select the desired font.
d. Click OK.
Note Some fonts do not change after you use this option.
Step 5 Disable caching:
a. Expand Advanced and click Cache. If no subcategories are listed, double-click Advanced to expand the list.
b. Under "Compare the page in the cache to the page on the network," select "Every time I view the page."
Logging into the Web Interface and Verifying Connectivity
Note Disable pop-up blocker software while using the WLSE web interface.
To verify HTTP and HTTPS connectivity, connect to the WLSE using a supported, properly configured Web browser and perform the following steps:
Step 1 To verify HTTP connectivity, enter the system IP address, followed by :1741 (the default port number).
For example, if the system IP address is 209.165.202.128, enter http://209.165.202.128:1741.
If a login dialog box appears, you have connectivity.
Step 2 To verify HTTPS connectivity, enter the system IP address, prefixed by https. Do not use a port number.
For example, if the system IP address is 209.165.202.128, enter https://209.165.202.128.
If a login dialog box appears, you have connectivity.
Step 3 Enter the user name admin and the password you created during setup in the login dialog box. The WLSE home page appears.
Adding Users
You can add users and configure their access to the WLSE Web interface and their access to the CLI. User access to the Web interface is determined by the roles assign to each user account. Users can only perform WLSE functions that are allowed by their logins.
Note For information about using alternative sources of authentication, see the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.7.
To create users:
Step 1 Select Administration > User Admin > Manage Users.
Step 2 Enter a user name, password, and email address in the appropriate fields.
Step 3 Select the user's CLI access level.
Step 4 Select the user's role. A user's role determines which WLSE features that user is allowed to access. The WLSE provides the following default user roles and you can create others and assign access to tabs and subtabs to your roles.
•System Admin
•Network Admin
•Network Operator
•Help Desk
Note The System Administrator role cannot be modified or deleted. You cannot delete the other default roles, but you can modify the tabs and subtabs to which they have access.
Step 5 Click Add to create the user.
Next Steps—Set Up Devices and Configure Device Management
The next steps are to:
•Prepare devices for management—see Chapter "Setting Up Devices—CiscoWorks 1105/1130/1130-19."
•Configure device management on the WLSE—"Setting Up Discovery and Device Management—CiscoWorks 1105/1130/1130-19."
Feedback
