10-29
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 10 Managing User Accounts
Configuring Wired Guest Access
Step 27 To establish the priority in which the servers are contacted to perform web authentication, follow these
steps. The default order is local, RADIUS, LDAP.
a. Highlight the server type (local, RADIUS, or LDAP) that you want to be contacted first in the box
next to the Up and Down buttons.
b. Click the Up and Down buttons until the desired server type is at the top of the box.
c. Click the < arrow to move the server type to the priority box on the left.
d. Repeat these steps to assign priority to the other servers.
Step 28 Click Apply to commit your changes.
Step 29 Click Save Configuration to save your changes.
Step 30 Repeat this process if a second (anchor) controller is being used in the network.
Using the CLI to Configure Wired Guest Access
Using the controller CLI, follow these steps to configure wired guest user access on your network.
Step 1 To create a dynamic interface (VLAN) for wired guest user access, enter this command:
config interface create interface_name vlan_id
Step 2 If a link aggregation trunk is not configured, enter this command to map a physical port to the interface:
config interface port interface_name primary_port {secondary_port}
Step 3 To enable or disable the guest LAN VLAN, enter this command:
config interface guest-lan interface_name {enable | disable}
This VLAN is later associated with the ingress interface created in Step 5.
Step 4 To create a wired LAN for wired client traffic and associate it to an interface, enter this command:
config guest-lan create guest_lan_id interface_name
The guest LAN ID must be a value between 1 and 5 (inclusive).
Note To delete a wired guest LAN, enter this command: config guest-lan delete guest_lan_id
Step 5 To configure the wired guest VLAN’s ingress interface, which provides a path between the wired guest
client and the controller by way of the Layer 2 access switch, enter this command:
config guest-lan ingress-interface guest_lan_id interface_name
Step 6 To configure an egress interface to transmit wired guest traffic out of the controller, enter this command:
config guest-lan interface guest_lan_id interface_name
Note If the wired guest traffic is terminating on another controller, repeat Step 4 and Step 6 for the
terminating (anchor) controller and Step 1 through Step 5 for the originating (foreign)
controller. Additionally, configure the following command for both controllers:
config mobility group anchor add {guest-lan guest_lan_id | wlan wlan_id} IP_address
To Next Page
Loading...
Need help?
General
