思科网控器WLC4400基本配置

项目实施方案及配置示例无线网络拓扑图Cisco-WLC 4402无线控制器配置示例：启动Cisco WLC后必须使用Windows中自带软件“超级终端”并通过console电缆登陆WLC进行配置。随后根据系统提示完成以下配置：System Name Cisco_40:4a:03: Enter Administrative User Name (24 characters max): ciscoEnter Administrative Password (24 characters max): ciscoService Interface IP Address Configuration noneDHCP:none =这里选择不使用DHCP服务来分配服务端口的IP地址获得方式。我们将手工进行配置。Management Interface IP Address: 172.16.10.10Management Interface Netmask: 255.255.0.0Management Interface Default Router:172.16.10.1Management Interface VLAN Identifier (0 = untagged): 10AP Manager Interface IP Address: 172.16.10.11AP-Manager is on Management subnet, using same valuesAP Manager Interface DHCP Server : 172.16.1.1 =指向核心交换机，由核心交换机负责DHCP服务功能。AP Transport Mode Layer2 Layer3: Layer3 =选择使用三层传输模式Virtual Gateway IP Address: 1.1.1.1 Mobility/RF Group Name: mobile-P Network Name (SSID): secure-P =Wlan的名称Allow Static IP Addresses YESno: yes =允许手工配置IP地址Configure a RADIUS Server now? YESno: no =不配置Radius ServerEnter the RADIUS Servers Address: Enter the RADIUS Servers Port 1812: Enter the RADIUS Servers Secret: Enter Country Code (enter help for a list of countries) US: CNFinally, the corresponding AP Radio types must be configured on the AP , as shown in Example 9 below. In this lab, we will be using 802.11b radios with transmit power set to 1mw in order to minimize RF interference within the lab.Enable 802.11b Network YESno: yesEnable 802.11a Network YESno: yesEnable 802.11g Network YESno: yesEnable Auto-RF YESno: yes当配置完毕后WLC会自动保存配置并从新启动。(Controller) >show interface summaryInterface Name Port Vlan Id IP Address Type Ap Mgr- - - - ap-manager LAG untagged 172.16.10.11 Static Yes management LAG untagged 172.16.10.10 Static No service-port N/A N/A 172.16.1.254 Static No virtual N/A N/A 1.1.1.1 Static No (Controller) > ping 172.16.10.1Send count=3, Receive count=3 from 172.16.10.1当配置service port以后就可以通过WEB浏览器配置WLC了。通过地址栏 https:/management IP addressUser：ciscoPassword：ciscoMonitor 页面中的摘要信息，可以看到AP的数量和传输所使用的带宽状态，AP的管理地址以及WLC的名字。Controller页面中的接口地址和关于VLAN和WLAN的地址。Wireless页面中WLC所注册的AP，已经这个AP的名字和MAC地址。Controller页面中针对DHCP服务的配置，也可以将DHCP服务地址指向核心交换机。Controller页面中关于VLAN接口的配置Security页面中针对二层网络安全的AAA（授权、认证、统计）服务配置Wlans页面中针对无线局域网选择安全方式配置Radius Server的地址核心交换机配置示例：Switch(config)#ip dhcp pool APSwitch(dhcp-config)#network 172.16.11.0 255.255.0.0Switch(dhcp-config)#domain-name Switch(dhcp-config)#default-router 172.16.10.1Switch(dhcp-config)#dns-server 202.106.180.5 200.155.121.135Switch(config)#ip dhcp excluded-address 172.16.10.1 172.16.10.11连接AP的POE接口配置示例：Switch(config)#interface f0/1Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 10Switch(config-if)#spanning-tree portfast与WLC相连的交换机端口配置示例：Switch(config)#interface f0/10Switch(config-if)#switchport trunk encapsulation dot1q Switch(config-if)#switchport mode trunk