- [Instructor] The wireless LAN controller GUI is
actually fairly intuitive once
the basic configuration pieces are understood.
I've got a virtual wireless LAN controller up and working
and ready for some basic configuration.
I'll start by logging in.
If not already there, I'll enter the advanced menu.
I'll start by looking at adding a RADIUS server
I can use for client authentication.
From here I'll click on security, then AAA,
then RADIUS, and authentication.
I'll go ahead and click new from here.
I'll leave the index on this one as one.
My RADIUS server is at 192.168.88.22.
I'll use ASCII with a shared secret of popcorn.
Popcorn and verify.
Pop corn.
I'll ensure that the server status is enabled
and that it's also checked enabled for network user.
I'll click apply.
Next, I'll create a dynamic interface.
Dynamic interfaces are used to connect the controller
to VLANs on the switch network.
I click controller, then interfaces.
I'll scroll to the right and click new.
I'll give it a name of Ent with a VLAN number of 40.
Now we'll apply.
I'll start by specifying a port number of one
and then give it an IP address.
In this case, it'll be 192.168.99.2,
subnet mask of 255.255.255.0, and a gateway of 192.168.99.1.
I'll then give it a couple of DHCP servers
that can relay requests to.
192.168.55.10 and 192.168.56.10.
DHCP relay is a process by which this device will pass
a DHCP request to another server for allocation.
At this point I can scroll up and click apply.
Now to create a wireless LAN.
On the top tab, I'll choose WLANs.
Now on the left menu under WLANs, I'll click WLANs.
I'll start by clicking go next to create new.
I'll leave the type default.
Then I'll create a profile name and SSID of Ent and Ent.
Though I have them both set the same, they can be different.
I'll leave the ID at the default value.
It comes into play when configuring templates.
I'll go ahead and click apply.
From the WLAN edit screen, I have five tabs available to me.
On the general tab, I see a very important one
which is status.
If it's disabled, the SSID is disabled.
If enabled, it's available for use.
Once I click on the security tab,
I expose an additional three tabs below it.
First, is layer two security.
Here I can select the encryption types and options.
By default, it allows WPA plus WPA2 under the security type,
but if I look down at the parameter section,
I see the WPA policy is unchecked which disables WPA.
I also only have AES enabled
which disables the legacy TKIP cipher.
If I wanted to use WPA2 enterprise,
I would select the 802.1X option
under authentication key management
and in fact it's enabled by default.
Another default option with 802.1X is
to use the preconfigured RADIUS servers.
If I wanted to override this,
I could use the AAA servers tab.
From here I'll move to the QoS tab.
By default QoS for these wireless frames will be set
to silver which is best effort.
Options here are platinum voice, gold video,
silver best effort, and last bronze background.
Last is the advanced tab.
An interesting option is the enable session timeout checkbox
and its subsequent timeout field.
On by default, it will disconnect the client
and require reauthentication after a defined time period.
By default, this is 30 minutes.
While there are a lot of options here,
most are outside the scope of this exam.
Using the wireless LAN controller GUI
really isn't that bad as you can see.
Perhaps it could be a valuable asset
to your next wireless deployment.