Step 6: Set Up a RADIUS Server for the Wireless LAN Controller Module

Step 1:   SMB Support Assistant Site Survey     Step 2:   Set Up Your Cisco Wireless LAN Controller Module Hardware     Step 3:   Configure Your Router for the Wireless LAN Controller Module     Step 4:   Complete Initial Setup for the Cisco Wireless LAN Controller Module     Step 5:   Configure the Cisco Wireless LAN Controller Module     Step 6:  Set Up a RADIUS Server for the Wireless LAN Controller Module                       Introduction                       Requirements                       Set Up a RADIUS Server                            Wireless Security Standards                            VLAN Requirements                            RADIUS Server Properties                            Manage Wireless Users                       Next Step                       Troubleshoot the Procedure                       Related Information     Step 7:   Add a Lightweight Access Point to Your Wireless Network

Download PDF   Step 6: Set Up a RADIUS Server for the Wireless LAN Controller Module    Set Up Your Wireless LAN Controller Module

Introduction

This document provides instructions on how to set up a RADIUS server to support the Wireless LAN Controller Module (WLCM).

Note: If you configured wireless security for a WPA2 pre-shared key, proceed to Add a Lightweight Access Point to Your Wireless Network.

This document shows how to configure the WLCM solution with these subnets:

If you want to set up a WLCM at more than one site, the Wireless LAN Controller Module IP Addressing Plan provides additional subnets that you can use for up to 30 sites. To set up an additional site, replace the VLAN subnets used in this document with the appropriate subnets for your site.

Back to Top

Requirements

To configure your router to support the WLCM, you need these items:

• An external RADIUS server that supports LEAP authentication.

• Completed worksheets from the Site Survey:

  • LAN Addressing Worksheet

  • ISR Router Worksheet

• You must have completed the steps in the Configure the Cisco Wireless LAN Controller Module document.

Back to Top

Set Up a RADIUS Server

The Cisco Wireless LAN Controller Module (WLCM) allows you to set up an external RADIUS server on your network to authenticate users. A variety of options are applications are available to support a RADIUS server. For complete instructions for your server type, refer to the documentation for your RADIUS server.

Follow these steps to set up a RADIUS server for the Wireless LAN Controller Module (WLCM):

Wireless Security Standards

The configuration provided for the WLCM uses WPA2 security, which is a combination of 802.1x and EAP authentication, and AES-CCMP encryption. Since the RADIUS server is responsible only for the client authentication exchange, the only security required for the RADIUS server is EAP authentication. The WLCM configuration provided here uses the LEAP implementation of EAP.

VLAN Requirements

Before you configure the RADIUS server, ensure that the router switchport attached to the RADIUS server is in the same VLAN as the LAPs in your wireless network. For further instructions, refer to Configure Your Router for the Wireless LAN Controller Module.

RADIUS Server Properties

To communicate with the WLCM, you need to configure your RADIUS server with the values to match the WLCM and router. For more information about how to configure these values, refer to the documentation for your RADIUS server.

Set up your RADIUS server with these values:

• IP Address: Assign the RADIUS server an available IP address in VLAN 24.

• Default gateway: 192.168.14.1

• Subnet mask: 255.255.255.0

• Client Hostname: Enter the WLCM name that you entered in the field W16 of the Integrated Services Router Worksheet.

• Client IP Address: 192.168.15.24

• Key: Enter the RADIUS key that you entered in the field W28 of the Integrated Services Router Worksheet.

• Authentication type: LEAP

Manage Wireless Users

Once you have configured these values, use your RADIUS server to add, remove, or change user profiles for the wireless network.

Back to Top

Next Step

You have completed this procedure. To add a Lightweight Access Point (LAP) to your wireless network, refer to Add a Lightweight Access Point to Your Wireless Network

To make further changes to the wireless network, refer to the Wireless Support Page.

To configure other devices in your network, refer to the Configuration Overview Page.

Back to Top

Troubleshoot the Procedure

This section provides information about common problems that you may encounter. If this information does not solve your problem, contact the SMB Technical Assistance Center (SMB TAC) for assistance.

Back to Top

Related Information

• Site Survey
• Cable Descriptions
• Wireless LAN Controller Module IP Addressing Plan
• Configure the Cisco Wireless LAN Controller Module