Cisco Cisco Aironet 1200 Access Point Referencia técnica

This step is very important. After the Cisco SWAN topology is established, all 802.1x client 
authentications are forwarded through the WDS. If the client authentication group(s) is not properly 
configured, WLAN clients are denied access to the network.

RADIUS servers are not redefined with the first command if you are using the same AAA server for 
infrastructure and client authentication.

Define the CiscoWorks WLSE:

wlsm(config)# wlccp wnm ip address <wlse ip address> 

Configuring the infrastructure access points to register with the WDS on the WLSM is similar to 
configuring infrastructure access points when the WDS is hosted on the access point. The necessary 
tasks are as follows:

Define SNMP communities

Enter a host name for the access point

Define Telnet or SSH parameters

Define WLCCP credentials

Define the WLSM as the WDS

Follow these steps to complete the tasks:

Log into the access point command-line interface and enter configuration mode.

Enter the following commands to define the SNMP communities:

infra-ap(config)#snmp-server view iso iso included

infra-ap(config)#snmp-server community <read-only community> view iso RO

infra-ap(config)#snmp-server community <read-write community> view iso RW 

Enter a host name for the access point:

infra-ap(config)#hostname <hostname>

Enter the following to define Telnet or SSH users:

infra-ap(config)# username <username> password <password>

Enter the following to enable SSH (optional step):

infra-ap(config)# ip domain-name <ip domain-name>

infra-ap(config)# crypto key generate rsa general-keys modulus <key size>

Enter the following commands to turn off Telnet (optional step), define an access control list, and apply 
it to the Telnet lines. Obviously, many access control list definitions can accomplish this task, but the 
following is an example:

infra-ap(config)# access-list <access-list number> permit tcp any any neq telnet

infra-ap(config)# line 0 16

infra-ap(config-line)# access-class <access-list number>

Enter the following command to define the WLCCP credentials for the access point:

infra-ap(config)# wlccp ap username <wlccp_username> password <password> 

Enter the following to direct the infrastructure access point to the WDS on the WLSM:

infra-ap(config)# wlccp ap wds ip address <wlsm ip address>