Campus WLAN Workflow

Create a campus WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. by using the new WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. wizard in the WebUI, manually configuring the WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. in the WebUI, or manually configuring the WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. in the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

Using the New WLAN Wizard in the WebUI

The simplest way to create a new WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. is to use the New WLAN wizard, available in the Configuration > WLANs section of the WebUI (Managed Network node hierarchy). The wizard walks you through the steps to define and configure the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN., authentication and authorization settings, and default user role for the WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection.. The configuration options that appear in the WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. wizard will vary, depending upon the type of WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. you choose to create.

Manually Configuring the WLAN in the WebUI

The following workflow lists the tasks to configure a campus WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection., with a signal SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., that uses 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. authentication. Click any of the links below for details on the configuration procedures for that task.

1. Configure your authentication servers.

2. Create an authentication server group and assign the authentication servers you configured in step 1 to that server group.

3. Configure a firewall access policy.

4. Create a user role and assign the firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. access policy you created in step 3 to that user role.

5. Create an AAA profile.

a. Assign the user role defined in step 4 to the 802.1X Authentication Default Role of the AAA Authentication, Authorization, and Accounting. AAA is a security framework to authenticate users, authorize the type of access based on user credentials, and record authentication events and information about the network access and network resource consumption. profile.

b. Associate the server group you created in step 2 to the AAA Authentication, Authorization, and Accounting. AAA is a security framework to authenticate users, authorize the type of access based on user credentials, and record authentication events and information about the network access and network resource consumption. profile.

6. Create a new SSID profile.

7. Create a new virtual AP profile.

8. Associate the virtual AP profile to the AAA Authentication, Authorization, and Accounting. AAA is a security framework to authenticate users, authorize the type of access based on user credentials, and record authentication events and information about the network access and network resource consumption. profile you created in Step 5.

9. Associate the virtual AP profile to the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile you created in Step 6.

Manually Configuring the WLAN in the CLI

The example below follows the suggested order of steps to configure a virtual AP using the command-line interface.

(host) [mynode] (config) #aaa server-group THR-DOT1X-SERVER-GROUP-WPA2

auth-server Internal

 

(host) [mynode] (config) #ip access-list session THR-POLICY-NAME-WPA2

user any any permit

(host) [mynode] (config) #user-role THR-ROLE-NAME-WPA2

access-list session THR-POLICY-NAME-WPA2

 

(host) [mynode] (config) #aaa server-group THR-DOT1X-SERVER-GROUP-WPA2

auth-server Internal

 

(host) [mynode] (config) #aaa profile THR-AAA-PROFILE-WPA2

dot1x-default-role THR-ROLE-NAME-WPA2

dot1x-server-group THR-DOT1X-SERVER-GROUP-WPA2

 

(host) [mynode] (config) #wlan ssid-profile THR-SSID-PROFILE-WPA2

essid THR-WPA2

opmode wpa2-aes

 

(host) [mynode] (config) #wlan virtual-ap THR-VIRTUAL-AP-PROFILE-WPA2

ssid-profile THR-SSID-PROFILE-WPA2

aaa-profile THR-AAA-PROFILE-WPA2

vlan 60

 

(host) [mynode] (config) #ap-group THRHQ1-STANDARD

virtual-ap THR-VIRTUAL-AP-PROFILE-WPA2