无线控制器WLC配置

无线控制器（WLC）配置1.无线控制器WLC的初始配置连接到WLC的console口，启动超级终端或其它终端软件，把com口属性设置还原为默认值（如下图），点确定应用配置回车进入命令行管理界面选择“5. Clear Configuration”，（注意：不同版本的选项顺序不同，要注意查看，而且该处停留时间较短，请及时选择操作序号），清除原有设置，并进行初始设置。

随后根据系统提示完成以下配置：Welcome to the Cisco Wizard Configuration ToolUse the '-' character to backup System Name [Cisco_40:4a:03]:Enter Administrative User Name (24 characters max): admin //管理员帐号和密码Enter Administrative Password (24 characters max): *****Re-enter Administrative Password: *****//掩码Management Interface VLAN Identifier (0 = untagged): 0 //指定vlan号，0表示WLC工作在vlan 0网段，该vlan 0网段相当于交换机的默认vlan网段，即相当于vlan 1网段。

Mobility/RF Group Name: wuxianNetwork Name (SSID):wuxian //设置初始wlanAllow Static IP Addresses [YES][no]: yes //允许手工配置IP地址Configure a RADIUS Server now? [YES][no]: noEnter Country Code list (enter 'help' for a list of countries) [US]: CN //选择中国区域CNEnable 802.11b Network [YES][no]: yesEnable 802.11a Network [YES][no]: yesEnable 802.11g Network [YES][no]: yes //开启802.11a,802.11b,802.11g协议Enable Auto-RF [YES][no]: yes //开启无线射频Configure a NTP server now? [YES][no]: noConfigure the system time now? [YES][no]: yesEnter the date in MM/DD/YY format: //月/日/年，时间设置......Configuration saved!Resetting system with new configuration...2.WLC的WEB网管设置2.1.登录WEB网管界面通过浏览器地址栏，点击login键，出现登录会话框。

网络拓扑图
在此设置中，思科 4400 WLC 和轻量级 AP 通过一个集线器连接。外部 RADIUS 服务器（Cisco Secure ACS）也连接到这个集线器。所有的设备都在同一个子网。无线接入点注册到无线控 制器。您必须配置 WLC 和 AP 采用轻量级扩展身份验证协议（LEAP）验证。无线客户端连接 到 AP 使用 LEAP 认证，以便与 AP 关联。使用 Cisco Secure ACS 进行 RADIUS 验证。
要求 .................................................................................................................................................2 使用的组件 .....................................................................................................................................2 配置.......................................................................................................................................................... 2 网络拓扑图 .....................................................................................................................................3 配置 WLC 的基本操作并注册轻量级接入点到控制器.............................................................3 在 WLC 配置外部 RADIUS 服务器进行 RADIUS 身份验证........................................................4 配置无线局域网参数 ....................................................................................................................6 配置 Cisco Secure ACS 服务器并创建用户数据库来认证无线客户端 ...................................8 配置无线客户端 ..........................................................................................................................12 验证配置 ...............................................................................................................................................14 故障排查 ...............................................................................................................................................16 故障排查要点...............................................................................................................................20 维护 EAP 定时器数值..................................................................................................................20 从 ACS RADIUS 服务器提取文件包进行故障排除...................................................................22

初始配置WLC－建立连接第一步：为ISR路由器的WLC接口配置IP地址WLC-router#config terminalEnter configuration commands, one per line. End with CNTL/Z.WLC-router(config)#interface wlan-controller 1/0WLC-router(config-if)#ip address 192.168.10.254 255.255.255.0WLC-router(config-if)#no shutWLC-router(config-if)#end第二步：测试连通WLC-router#ping 192.168.10.254Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 msWLC-router#访问WLC模块WLC-router#service-module wlan-controller 1/0 sessionTrying 192.168.10.254, 2066 ... OpenUser:ciscoPassword:*****(Cisco Controller) >如果不是第一次进入，可以出现进不去的现象：WLC-router#service-module wlan-controller 1/0 sessionTrying 192.168.10.254, 2066 ...% Connection refused by remote hostWLC-router#service-module wlan-controller 1/0 session clear[confirm][OK]WLC-router#service-module wlan-controller 1/0 sessionTrying 192.168.10.254, 2066 ... OpenUser:cisco初始配置WLC模块如果是新的WLC，或者不再想要已有配置的WLC模块，只要进行如下的命令操作，均可以进入快速安装对话向导：(Cisco Controller) >clear configAre you sure you want to clear the configuration? (y/n) yConfiguration Cleared!(Cisco Controller) >reset systemThe system has unsaved changes.Would you like to save them now? (y/N) nConfiguration Not Saved!Are you sure you would like to reset the system? (y/N) y System will now restart!Initializing memory. Please wait…Welcome to the Cisco Wizard Configuration ToolUse the '-' character to backupSystem Name [Cisco_e8:f6:00]: WLCEnter Administrative User Name (24 characters max): ciscoEnter Administrative Password (24 characters max): *****Management Interface IP Address:Management Interface Netmask: 255.255.255.0Management Interface Default Router: 192.168.10.254Management Interface VLAN Identifier (0 = untagged):Management Interface Port Num [1]:Management Interface DHCP Server IP Address: 192.168.10.254AP Manager Interface IP Address: 192.168.10.2AP-Manager is on Management subnet, using same valuesAP Manager Interface DHCP Server (192.168.10.254): 192.168.10.254Virtual Gateway IP Address: 1.1.1.1Mobility/RF Group Name: SECLUBNetwork Name (SSID): WLAN15Allow Static IP Addresses [YES][no]: noConfigure a RADIUS Server now? [YES][no]: noWarning! The default WLAN security policy requires a RADIUS server. Please see documentation for more details.Enter Country Code (enter 'help' for a list of countries) [US]: CNEnable 802.11b Network [YES][no]: YESEnable 802.11a Network [YES][no]: YESEnable 802.11g Network [YES][no]: YESEnable Auto-RF [YES][no]: YESConfigure a NTP server now? [YES][no]: YESEnter the NTP server's IP address: 192.168.10.254Enter a polling interval between 3600 and 604800 secs: 3600或者Configure a NTP server now? [YES][no]: noConfigure the system time now? [YES][no]: yesEnter the date in MM/DD/YY format: 06/20/07Enter the time in HH:MM:SS format: 14:04:00Configuration correct? If yes, system will save it and reset. [yes][N O]: yesConfiguration saved!Resetting system with new configuration...由于WLC模块本身没有时间时钟，所以不提供时钟功能，建议使用NTP从路由器或者网络上时钟服务器上获取时间。

Cisco无线控制器 WLC基本命令发布日期：[10-03-16 16:35:11] 点击次数：[125 ]关于Cisco控制器的操作系统为IOS系统，初始配置如同Cisco交换机和路由器一样，我们可以使用Console线缆接到WLC（WLAN Ctroller）Console 端口对其进行初始化配置，然后再使用GUI的方式进行深入功能的配置。

1、基本配置（1）、配置控制器管理接口配置步骤：Ø show interface detailed management */显示管理接口的设置信息Øconfig wlan disable wlan-number */关闭设备上所有WLAN Øconfig interface address management ip-addr ip-netmask gateway */配置管理接口的地址、掩码、网关config interface vlan management {vlan-id | 0} */配置管理接口VLAN，0代表untagged VLAN，非0值代表tagged VLAN，而思科控制器只识别tagged VLAN。

config interface port management physical-ds-port-number */配置管理接口的物理目的端口config interface dhcp management ip-address-of-primary-dhcp[ip-address-of-secondary-dhcp-server] */配置管理接口的主DHCP服务器和次DHCP服务器。

config interface acl management access-control-list-name */配置管理接口的ACL（控制列表）Øsave config */保存配置Ø show interface detailed management */显示管理接口的设置信息（2）、配置AP管理接口配置步骤：Ø show interface summary */显示接口汇总信息Ø show interface detailed ap-manager */显示AP管理接口设置信息Øconfig wlan disable wlan-number */关闭该接wlan通讯Øconfig interface address ap-manager ip-addr ip-netmask gateway */配置AP管理接口的IP地址、掩码、网关config interface vlan ap-manager {vlan-id | 0} */配置AP管理接口的VLAN，0代表untagged VLAN，非0值代表tagged VLAN，而思科控制器只识别tagged VLAN。