Информационное Руководство для Cisco Cisco 2000 Series Wireless LAN Controller
LWAPP−enabled access points can discover and join a CAPWAP controller, and conversion
to a CAPWAP controller is seamless. For example, the controller discovery process and the
firmware downloading process when you use CAPWAP are the same as when you use
LWAPP. The one exception is for Layer 2 deployments, which are not supported by
CAPWAP.
to a CAPWAP controller is seamless. For example, the controller discovery process and the
firmware downloading process when you use CAPWAP are the same as when you use
LWAPP. The one exception is for Layer 2 deployments, which are not supported by
CAPWAP.
You can deploy CAPWAP controllers and LWAPP controllers on the same network. The
CAPWAP−enabled software allows access points to join either a controller that runs
CAPWAP or LWAPP. The only exception is the Cisco Aironet 1140 Series Access Point,
which supports only CAPWAP and therefore joins only controllers that run CAPWAP. For
example, an 1130 series access point can join a controller that runs either CAPWAP or
LWAPP whereas an 1140 series access point can join only a controller that runs CAPWAP.
CAPWAP−enabled software allows access points to join either a controller that runs
CAPWAP or LWAPP. The only exception is the Cisco Aironet 1140 Series Access Point,
which supports only CAPWAP and therefore joins only controllers that run CAPWAP. For
example, an 1130 series access point can join a controller that runs either CAPWAP or
LWAPP whereas an 1140 series access point can join only a controller that runs CAPWAP.
For more information, refer to the Access Point Communication Protocols section of the
configuration guide.
configuration guide.
Q. Are there any guidelines for using CAPWAP?
A. Follow these guidelines when you use CAPWAP:
If your firewall is currently configured to allow traffic only from access points that
use LWAPP, you must change the rules of the firewall to allow traffic from access
points that use CAPWAP.
use LWAPP, you must change the rules of the firewall to allow traffic from access
points that use CAPWAP.
♦
Make sure that the CAPWAP UDP ports 5246 and 5247 (similar to the LWAPP UDP
ports 12222 and 12223) are enabled and are not blocked by an intermediate device
that could prevent an access point from joining the controller.
ports 12222 and 12223) are enabled and are not blocked by an intermediate device
that could prevent an access point from joining the controller.
♦
If access control lists (ACLs) are in the control path between the controller and its
access points, you need to open new protocol ports to prevent access points from
being stranded.
access points, you need to open new protocol ports to prevent access points from
being stranded.
♦
The access points use a random UDP source port to reach these destination ports on the
controller. In controller software release 5.2, LWAPP was removed and replaced by
CAPWAP, but if you have a new out−of−the−box access point, it could try to use LWAPP to
contact the controller before it downloads the CAPWAP image from the controller. Once the
access point downloads the CAPWAP image from the controller, it uses only CAPWAP to
communicate with the controller.
controller. In controller software release 5.2, LWAPP was removed and replaced by
CAPWAP, but if you have a new out−of−the−box access point, it could try to use LWAPP to
contact the controller before it downloads the CAPWAP image from the controller. Once the
access point downloads the CAPWAP image from the controller, it uses only CAPWAP to
communicate with the controller.
Note: After 60 seconds of trying to join a controller with CAPWAP, the access point falls
back to using LWAPP. If it cannot find a controller using LWAPP within 60 seconds, it tries
again to join a controller using CAPWAP. The access point repeats this cycle of switching
from CAPWAP to LWAPP and back again every 60 seconds until it joins a controller.
back to using LWAPP. If it cannot find a controller using LWAPP within 60 seconds, it tries
again to join a controller using CAPWAP. The access point repeats this cycle of switching
from CAPWAP to LWAPP and back again every 60 seconds until it joins a controller.
An access point with the LWAPP recovery image (an access point converted from
autonomous mode or an out−of−the−box access point) uses only LWAPP to try to join a
controller before it downloads the CAPWAP image from the controller.
autonomous mode or an out−of−the−box access point) uses only LWAPP to try to join a
controller before it downloads the CAPWAP image from the controller.
Q. How do I configure my WLC for basic operation?
A. In order to configure the WLC for basic operation, refer to Wireless LAN Controller and
Lightweight Access Point Basic Configuration Example.
Lightweight Access Point Basic Configuration Example.