Cisco Catalyst SD-WAN Control Components and Device Management Guide, Releases 26.x and Later

PDF

Configuring wireless management

Updated: June 9, 2026

Want to summarize with AI?

Log in

Describes methods for configuring wireless management.

Describes methods for configuring wireless management.

Configure wireless management on Cisco ISR 1000 series routers using a configuration group

Before you begin

On the Configuration > Configuration Groups page, choose SD-WAN as the solution type.

Procedure

1.

From the Cisco SD-WAN Manager menu, choose Configuration > Configuration Groups.

2.

Create and configure a Wireless LAN feature in Service profile.

  1. Configure the basic details for the wireless LAN.

    Field

    Description

    Enable 2.4G*

    Disable this option to shut down the radio type of 2.4 GHz.

    Default: Enabled

    Enable 5G*

    Disable this option to shut down the radio type of 5 GHz.

    Default: Enabled

    Country*

    Choose the country where the router is installed.

    Username*

    Specify the username of Cisco Mobility Express.

    Password*

    Specify the password of Cisco Mobility Express.

  2. Configure ME IP address.

    Field

    Description

    ME Dynamic IP*

    Enable this option so that the interface receives its IP address dynamically from a DHCP server.

    ME IP Address

    Specify the IP address of Cisco Mobility Express.

    Subnet Mask

    Specify the subnet mask of Cisco Mobility Express.

    Default Gateway

    Specify the default gateway address of Cisco Mobility Express.

  3. Configure the Wi-Fi SSID details for setting up a wireless LAN.

    Field

    Description

    Add SSID

    SSID Name*

    Enter a name for the wireless SSID.

    It can be a string from 4 to 32 characters. The SSID must be unique.

    Admin State*

    Enable this option to indicate that the interface has been configured.

    Broadcast SSID*

    Enable this option if you want to broadcast the SSID. Disable this option if you do not want the SSID to be visible to all the wireless clients.

    VLAN (Range 1-4094)*

    Enter a VLAN ID for the wireless LAN traffic.

    Radio Type

    Choose one of the following radio types:

    • 2.4GHz

    • 5GHz

    • All

    Security Type*

    Choose a security type:

    • WPA2 Enterprise: Choose this option for an enterprise where you authenticate and authorize network users with a remote RADIUS server.

    • WPA2 Personal: Choose this option to authenticate users who want to access the wireless network using a passphrase.

    • Open: Choose this option to allow access to the wireless network without authentication.

    Passphrase*

    This field is available if you choose WPA2 Personal as the security type. Set a pass phrase. This pass phrase provides users access to the wireless network.

    QoS Profile

    Choose a QoS profile.

What to do next

Refer to Deploy a Configuration Group in the Cisco Catalyst SD-WAN Configuration Groups Reference Guide.

Configure wireless management on ISR 1000 series routers

Use this procedure to configure and manage wireless settings on your Cisco ISR 1000 Series Routers using Cisco SD-WAN Manager. This task allows you to enable wireless LAN functionality directly on the router, leveraging its embedded wireless controller capabilities.

Wireless management on ISR 1000 Series Routers enables you to set up wireless LANs (WLANs) directly on the router, utilizing its embedded wireless controller. This eliminates the need for an external wireless LAN controller, simplifying network architecture and management.

Before you begin

  • Ensure your Cisco ISR 1000 Series Router is a supported model with a WLAN module (WiFi 5 or WiFi 6 capable).

  • Confirm that necessary network prerequisites, such as DHCP server availability and proper VLAN configuration for the WLAN module's management interface, are in place.

Follow these steps to configure wireless management using feature templates in Cisco SD-WAN Manager:

Procedure

1.

From the Cisco SD-WAN Manager menu, choose Configuration > Templates.
2.

Click Feature Templates.

In Cisco vManage Release 20.7.x and earlier releases, Feature Templates is titled as Feature.
3.

Click Add Template to select an appropriate device model.
4.

In the left pane, from Select Devices, choose a Cisco ISR 1000 Series Router for which you are creating a template.
5.

Under OTHER TEMPLATES, click ISR1K Wireless to select it as the feature template.
6.

In the Template Name field, enter a name for the feature template.

This field is mandatory and can contain only uppercase and lowercase letters, the digits 0 to 9, hyphens (-), and underscores (_). It cannot contain spaces or any other characters.
7.

In the Description field, enter a description for the feature template.

This field is mandatory, and it can contain all characters and spaces.
8.

Enter the Wi-Fi SSID details for setting up a wireless LAN:

Parameter Name

Description

Wireless Network Name (SSID)

Enter a name for the wireless SSID.

It can be a string from 4 to 32 characters. The SSID must be unique.

VLAN (Range 1-4094)

Enter a VLAN ID for the wireless LAN traffic.

Security Type

Choose a security type:

  • WPA2 Enterprise: Choose this option for an enterprise where you authenticate and authorize network users with a remote RADIUS server.

  • WPA2 Personal: Choose this option to authenticate users who want to access the wireless network using a passphrase.

  • Open: Choose this option to allow access to the wireless network without authentication.

RADIUS Server IP

(Optional) This field is available if you choose the WPA2 Enterprise option as the security type. Enter the IP address of the RADIUS server.

Authentication Port

(Optional) This field is available if you choose the WPA2 Enterprise option as the security type. Enter the authentication port number of the RADIUS server.

Shared Secret

(Optional) This field is available if you choose the WPA2 Enterprise option as the security type. Enter the shared secret key of the RADIUS server.

Passphrase

(Optional) This field is available if you choose the WPA2 Personal option as the security type. Set a pass phrase. This pass phrase provides users with access to the wireless network.

Admin State

Choose an admin state.

Radio Type

Choose one of the following radio types:

  • 2.4GHz

  • 5GHz

  • Both

Broadcast SSID

Choose On to broadcast the SSID. Choose Off if you do not want the SSID to be visible to all the wireless clients.

QoS Profile

Choose a QoS profile.
9.

Enter the General details for the wireless LAN:

Parameter Name

Description

Country

Choose the country where the ISR is installed.

Username

Specify the username of Cisco Mobility Express.

If you are using a C1131 Cisco IOS XE Catalyst SD-WAN device specify the username for the EWC.

Password

Specify the password for Cisco Mobility Express or the EWC.
10.

Enter the Advanced details for the wireless LAN:

Parameter Name

Description

Controller IP Address
Note

For Cisco IOS XE Catalyst SD-WAN Release 17.6.1a, and Cisco vManage Release 20.6.1 and earlier releases, this field is displayed as ME IP Address.

Specify the Management IP address of Cisco Mobility Express or EWC.

Subnet Mask

Specify the subnet mask for the Management IP address.

Default Gateway

Specify the default gateway address of Cisco Mobility Express or EWC.

2.4GHz Shutdown

Click Yes to shut down the 2.4 GHz radio type. Click No to not shut down this radio type.

5GHz Shutdown

Click Yes to shut down the 5 GHz radio type. Click No to not shut down this radio type.
11.

Click Save to save your wireless configuration.

After completing these steps, the wireless LAN settings are configured on your Cisco ISR 1000 Series Router via the feature template, enabling wireless connectivity.

What to do next

Deploy the configured feature template to the desired devices. For more information, see Deploy a Configuration Group.

Configure wireless management on Cisco ISR 1000 series routers using CLI commands

Use this procedure to apply Command Line Interface (CLI) templates to configure wireless LAN settings on your Cisco ISR 1000 series routers. This method allows for direct configuration using pre-defined command sets.

CLI templates are pre-configured sets of commands that simplify the deployment of wireless settings. They allow for precise control over radio profiles, WLAN SSIDs, and general wireless LAN parameters. By default, these commands are executed in global configuration mode.

Before you begin

Ensure you have console or SSH access to the Cisco ISR 1000 series router.

Follow these steps to configure wireless management settings using CLI templates:

Configure a WLAN profile using a CLI template

Note

By default, CLI templates execute commands in global config mode.

wlan-profile wlan-profile-sample-1 
vlan-id 100  
ssid sample-ssid-1   
data-security personal 
passphrase 0 Pass-Phrase-Sample123# 
qos-type silver 
wlan-profile wlan-profile-sample-2 
vlan-id 200 
ssid sample-ssid-2 
data-security enterprise 
aaa radius-server 10.2.3.4 auth-port 1812 shared-secret 0 EsrdT_23sss
 
qos-type gold 
nobroadcast-ssid

Configure general WLAN settings using a CLI template

Note

By default, CLI templates execute commands in global config mode.

Here is the complete configuration example that shows that show how to configure and manage wireless settings on Cisco ISR 1000 Series Routers.

wlan-profile TEST-Enterprise
radio-band all
vlan-id 300
ssid TEST-Enterprise
data-security enterprise
aaa radius-server 192.168.100.20 auth-port 1812 shared-secret 6 EsrdT_23sss
qos-type silver


wlan-profile TEST-Personal
radio-band all
ssid TEST-Personal
data-security personal
passphrase 0 IdSvs23452#
qos-type silver


radio-profile 24ghz
channel auto
channel-bandwidth auto


radio-profile 5ghz
channel auto
channel-bandwidth auto


wireless-lan mgmt ip address 192.168.1.11 255.255.255.0 default-gateway 192.168.1.1
wireless-lan mgmt credential username admin password 6 sRe32dfst#asd
wireless-lan country US

Procedure

1.

Access the router's command-line interface.

Log in to your Cisco ISR 1000 series router.

2.

Enter global configuration mode.

From privileged EXEC mode, enter configure terminal. 

Router# configure
Router(config)#
3.

Configure the radio profiles.

Apply the necessary CLI commands to define the 2.4GHz and 5GHz radio settings, such as shutdown status, channel, and bandwidth.

radio-profile 24ghz 
shutdown
exit
radio-profile 5ghz 
no shutdown
4.

Configure the WLAN profiles.

Apply the CLI commands to define your wireless SSIDs, including VLAN IDs, security types (WPA2 Personal, WPA2 Enterprise, Open), passphrases, RADIUS server details, and QoS profiles.

wlan-profile wlan-profile-sample-1 
vlan-id 100  
ssid sample-ssid-1   
data-security personal 
passphrase 0 Pass-Phrase-Sample123# 
qos-type silver 
wlan-profile wlan-profile-sample-2 
vlan-id 200 
ssid sample-ssid-2 
data-security enterprise 
aaa radius-server 10.2.3.4 auth-port 1812 shared-secret 0 EsrdT_23sss
 
qos-type gold 
nobroadcast-ssid
5.

Configure general wireless LAN settings.

Apply the CLI commands to set the country code, management IP address, default gateway, and management credentials for Cisco Mobility Express or the Embedded Wireless Controller (EWC). 

wireless-lan country US 
wireless-lan mgmt ip address10.16.1.100 255.255.255.0 default-gateway 192.168.1.1 
wireless-lan mgmt credential username admin password 0 sRe32dfst#asd
6.

Commit the configuration changes.

Here is the complete configuration example that shows that show how to configure and manage wireless settings on Cisco ISR 1000 Series Routers.

wlan-profile TEST-Enterprise
radio-band all
vlan-id 300
ssid TEST-Enterprise
data-security enterprise
aaa radius-server 192.168.100.20 auth-port 1812 shared-secret 6 EsrdT_23sss
qos-type silver


wlan-profile TEST-Personal
radio-band all
ssid TEST-Personal
data-security personal
passphrase 0 IdSvs23452#
qos-type silver


radio-profile 24ghz
channel auto
channel-bandwidth auto


radio-profile 5ghz
channel auto
channel-bandwidth auto


wireless-lan mgmt ip address 192.168.1.11 255.255.255.0 default-gateway 192.168.1.1
wireless-lan mgmt credential username admin password 6 sRe32dfst#asd
wireless-lan country US

The wireless management settings are applied to your Cisco ISR 1000 series router using the specified CLI templates. The router's wireless module will now operate according to the configured radio and WLAN profiles.

This section provides a sample Command Line Interface (CLI) configuration for wireless management on Cisco ISR 1000 Series Routers. This example illustrates a complete setup, including WLAN profiles, radio settings, and general wireless LAN management parameters, serving as a factual representation for reference and implementation. Refer to Configuration example for wireless configuration on Cisco ISR 1000 series routers.

What to do next

Monitor the wireless configuration to verify that the settings are active and functioning as expected. For verfication steps, refer to Monitor wireless configuration on Cisco ISR 1000 series routers.

Configuration example for wireless configuration on Cisco ISR 1000 series routers

This section provides a sample CLI configuration for wireless management on Cisco ISR 1000 series routers. This example illustrates a complete setup, including WLAN profiles, radio settings, and general wireless LAN management parameters, serving as a factual representation for reference and implementation.

Wireless configuration example

wlan-profile TEST-Enterprise
radio-band all
vlan-id 300
ssid TEST-Enterprise
data-security enterprise
aaa radius-server 192.168.100.20 auth-port 1812 shared-secret 6 EsrdT_23sss
qos-type silver


wlan-profile TEST-Personal
radio-band all
ssid TEST-Personal
data-security personal
passphrase 0 IdSvs23452#
qos-type silver


radio-profile 24ghz
channel auto
channel-bandwidth auto


radio-profile 5ghz
channel auto
channel-bandwidth auto


wireless-lan mgmt ip address 192.168.1.11 255.255.255.0 default-gateway 192.168.1.1
wireless-lan mgmt credential username admin password 6 sRe32dfst#asd
wireless-lan country US