Monday 26 October 2015

CISCO AIR WIRELESS LAN CONTROLLER CONFIGURATION LAB part 1

CISCO WIRELESS LAN CONTROLLER CONFIGURATION

Objective;
1.    Configure a cisco WLC using CLI setup wizard   
2.    Connect to the Controller using Web interface
3.    Allow telnet connections to the controller
4.    Create a WLAN with open authentication
5.    Create a DHCP scope to support local clients
6.    Verify AP
7.    Connect to new WLAN

1. Management interface 10.1.1.100/24 AP uses this interface to discover
controller
2. AP Manager interface 10.1.1.101/24 Used for L3 comms to all AP- now gone
3. Service port interface Used for OOB management 192.168.0.200/24


887 Router configuration
Interface
fastEthernet 3
Description
trunk link to 2960switch1
Switchport
mode trunk
!
Interface
fastEthernet 0
Description
access link to internet
Switchport
mode access
Switchport
access vlan 1
!
Interface
vlan 1
Description
VLAN 1 SVI to internet
Ip
address 192.168.0.202 255.255.255.0
Ip nat
outside
!
Interface
vlan 10
Description
default gateway for WLAN10
Ip
address 10.1.1.1 255.255.255.0
Ip nat
inside
!
Interface
vlan 20
Description
default gateway for WLAN20
Ip
address 20.1.1.1 255.255.255.0
Ip nat
inside
!
Ip nat
inside source list 1 interface vlan1 overload
!
access-list
1 permit 10.0.0.0 0.255.255.255
access-list
1 permit 20.0.0.0 0.255.255.255
Ip
route 0.0.0.0 0.0.0.0 vlan1 192.168.0.1
!

2960 Switch Configuration

vlan
10
 name WLAN10
!
vlan
20
 name WLAN20
!
interface
FastEthernet0/1
Description
link to router fastEthernet3
 switchport mode trunk
!
interface
FastEthernet0/2
description
link to wireless AP1
 switchport access vlan 10
!
interface
GigabitEthernet0/1
description
link to WLC1
 switchport mode trunk
!
interface
vlan 1
description
OOB management of switch
ip
address 192.168.0.201 255.255.255.0
!
ip
default-gateway 192.168.0.1


CONTROLLER CONFIG

Controller Management interface IP

10.1.1.100/24

AP manager interface

10.1.1.101/24

Service port for OOB

192.168.0.200/24

2960 switch  OOB

192.168.0.201/24

887 Router  OOB

192.168.0.202/24

887 VLAN 10 IP

10.1.1.1/24

887 VLAN 20 IP

20.1.1.1/24

WLAN10

SSID

WLAN20

SSID

Controller DHCP scope VLAN 10

10.1.1.10 – 10.1.1.20

Controller DHCP scope for VLAN 20

20.1.1.10 – 20.1.1.20

System Name [Cisco_8a:6c:23] (31characters max): WLC1
Enter Administrative User Name (24characters max): admin
Enter Administrative Password (3 to 24 characters): Cisco12345
Re-enter Administrative Password: Cisco12345
Service Interface IP Address
Configuration [static][DHCP]: static
Service Interface IP Address Configuration: 192.168.0.200
Service Interface netmask: 255.255.255.0
Enable Link Aggregation (LAG) [yes][NO]: NO
Management Interface IP Address: 10.1.1.100
Management Interface Netmask: 255.255.255.0
Management Interface Default Router: 192.168.0.1
Management Interface VLAN Identifier (0 = untagged): 10
Management Interface Port Num [1 to 2]: 1
Management Interface DHCP Server IP Address: 10.1.1.100
AP Manager Interface IP Address: 10.1.1.101
AP-Manager is on Management subnet, using same values
AP Manager Interface DHCP Server (10.1.1.100):
Virtual Gateway IP Address: 1.1.1.1
Mobility/RF Group Name: RGGROUP1
Network Name (SSID): WLAN10
Configure DHCP Bridging Mode [yes][NO]: NO
Allow Static IP Addresses [YES][no]: YES
Configure a RADIUS Server now? [YES][no]: NO
Warning! The default WLAN security policy requires a RADIUS server.
Please see documentation for more details.
Enter Country Code list (enter 'help'
for a list of countries) [US]: GB
Enable 802.11b Network [YES][no]: YES
Enable 802.11a Network [YES][no]: YES
Enable 802.11g Network [YES][no]: YES
Enable Auto-RF [YES][no]: YES
Configure a NTP server now? [YES][no]: YES
Enter the NTP server's IP address: 10.1.1.1
Enter a polling interval between 3600 and 604800 secs: 3600


4 comments:

  1. Hi, I need to configure the same setup. For that I Have 2504 WLC and 2960 Layer 2 switch ,Cisco access points and ADSL line. Is it possible to configure without a router..?

    ReplyDelete
  2. This blog is helpful and informative with its content on the usefulness.CISCO Firewall Thanks for sharing.

    ReplyDelete