cisco 2504 controller web setting

command 改csico controller ip 

>wlan disable all 

>configure interface address managent IP-ADDRESS SUBNETMASK GATEWAY

>wlan enable all

show ap join stats summary all

show ap summary

在interface 編輯 DHCP server  

security>AAA>TACACS+>Local Net Users可以看建立哪些帳號

web認證  

security>Web Auth> Web Login Page> web authentication type(選internal)

management>Mgmt Via Wireless> Enable Controller ... Clients口 要打勾

這樣才能從底下AP連上來的client管理controller 

management>Local Management User >建立管理帳號

Lobbyadmin介紹:建立臨時帳號的管理者 

改Controller IP等資訊

Controller>Interfaces>Interface Name點進去

[Device] cisco controller setup final

Would you like to terminate autoinstall? [yes]:

System Name [Cisco_b8:71:c4] (31 characters max):
AUTO-INSTALL: process terminated -- no configuration loaded
2504
Enter Administrative User Name (24 characters max): cisco
Enter Administrative Password (3 to 24 characters): ********
Re-enter Administrative Password                 : ********

Enable Link Aggregation (LAG) [yes][NO]: no

Management Interface IP Address: 192.168.45.200
Management Interface Netmask: 255.255.255.0
Management Interface Default Router: 192.168.45.254
Management Interface VLAN Identifier (0 = untagged):
Management Interface Port Num [1 to 4]: 1
Management Interface DHCP Server IP Address: 172.16.41.1

Virtual Gateway IP Address: 1.1.1.1

Multicast IP Address: 239.0.0.1

Mobility/RF Group Name: poc

Network Name (SSID): poc

Configure DHCP Bridging Mode [yes][NO]:

Allow Static IP Addresses [YES][no]:

Configure a RADIUS Server now? [YES][no]: no
Warning! The default WLAN security policy requires a RADIUS server.
Please see documentation for more details.

Enter Country Code list (enter 'help' for a list of countries) [US]: TW

Enable 802.11b Network [YES][no]:
Enable 802.11a Network [YES][no]:
Enable 802.11g Network [YES][no]:
Enable Auto-RF [YES][no]:

Configure a NTP server now? [YES][no]:
Enter the NTP server's IP address: 211.22.103.158
Enter a polling interval between 3600 and 604800 secs: 3600

Configuration correct? If yes, system will save it and reset. [yes][NO]: yes

Configuration saved!
Resetting system with new configuration...


Configuration saved!
Resetting system with new configuration...
Restarting system.

cisco ap >> ERROR!!! Command is disabled.

喔我好強XD

1. 刪除現有的ios,讓他回復到最初機器上面的
2. clear pre-config


ERROR!!! Command is disabled.

出現這訊息,就不用在ap上踹了,直接到controller的web介面
找到這台ap的mac 或hostname, 直接在上面修改 hostname or ip等資訊
收工~

若硬要console設定ap 下文說是需要給ap一組username/password
我沒試過..因為上面做完就收工了.

Q. When I enable some LWAPP commands on my LAP, I get an error that says the command is disabled. Why is this?

 
AccessPoint#clear lwapp ap controller ip address 
ERROR!!! Command is disabled.

A. Once your AP has successfully joined a controller, the LWAPP commands are disabled. In order to enable LWAPP commands again, you must set the username/password of the AP from the controller CLI with the config ap username <name> password <pwd> <cisco-ap>/all command. Once that is done, you can do a clear lwapp private-config in the AP CLI to allow you to manually re-issue the AP LWAPP configuration commands.
Note: If you are running WLC version 5.0 and later, use this command to set the username and password on the AP:

config ap mgmtuser add username AP_username 
password AP_password secret secret {all | Cisco_AP}

cisco ap ERROR!!! Command is disabled.

cisco 4506 Password Recovery

1.Press Ctrl-C within 5 seconds to prevent autoboot.

2.
rommon 1 > set
rommon 1 > confreg

 Configuration Summary :
 => load ROM after netboot fails
 => console baud: 9600
 => autoboot from: commands specified in 'BOOT' environment variable

 do you wish to change the configuration? y/n  [n]:  y
 enable  "diagnostic mode"? y/n  [n]:  n
 enable  "use net in IP bcast address"? y/n  [n]:  n
 disable "load ROM after netboot fails"? y/n  [n]:  n
 enable  "use all zero broadcast"? y/n  [n]:  n
 enable  "break/abort has effect"? y/n  [n]:  n
 enable  "ignore system config info"? y/n  [n]:  y

 change console baud rate? y/n  [n]:  n

 change the boot characteristics? y/n  [n]:  n
=======================================================
 Configuration Summary :
 => load ROM after netboot fails
 => ignore system config info
 => console baud: 9600
 => autoboot from: commands specified in 'BOOT' environment variable

 do you wish to save this configuration? y/n  [n]:  y
 You must reset or power cycle for new configuration to take effect
===========================================================

rommon 1 >confreg=0x2142
You must reset or power cycle for the new configuration to take effect.
Issue the reset command so that the module reboots.
Due to the changes that you made in step 2, the module reboots but ignores the saved configuration.
rommon 2 > reset

Resetting .......

rommon 3 >




3.
Switch#configure memory


4.
config t
no no enable secret

enable secret cisco

config-register 0x2102

wr

sh ver
.
.
.
Configuration register is 0x2142 (will be 0x2102 at next reload)


reload


cisco password recovery

Cisco PI 圖面

Multiple SSID With Multiple VLANs (Cisco AP)

<<<Configuration on the AP - Step 1>>> 

Conf t
Dot11 ssid one
Vlan 1
Authentication open
Mbssid Guest-mode
!
Dot11 ssid two
Vlan 2
  authentication open
  authentication key-management wpa
  wpa-psk ascii 7 <WPA key>
Mbssid Guest-mode
!
Dot11 ssid three
Vlan 3
authentication key-management wpa version 2
wpa-psk ascii 7 <WPA key>
Mbssid Guest-mode
!

!

<<<Step 2 - Assigning the Encryption to different SSIDs with respective VLANs>>> 

Int dot11 0
Mbssid
encryption vlan 1 mode wep mandatory
encryption vlan 1 key 1 size 40bit <10bit key>
encryption vlan 2 mode ciphers tkip
encryption vlan 3 mode ciphers aes-ccm 

ssid one
ssid two
ssid three
<<<Step 3 - Configuring the sub interface for Dot11 radio 0 and Ethernet.>>>
AP(config)# interface Dot11Radio0.1
AP(config-subif)# encapsulation dot1Q 1 native
AP(config-subif)#bridge group 1
AP(config-subif)# interface FastEthernet0.1
AP(config-subif)#bridge group 1
AP(config-subif)# encapsulation dot1Q 1 native

!
AP(config)# interface Dot11Radio0.2
AP(config-subif)# encapsulation dot1Q 2
AP(config-subif)#bridge group 2
AP(config-subif)# interface FastEthernet0.2
AP(config-subif)#bridge group 2
AP(config-subif)# encapsulation dot1Q 2
!
AP(config)# interface Dot11Radio0.3
AP(config-subif)# encapsulation dot1Q 3
AP(config-subif)#bridge group 3
AP(config-subif)# interface FastEthernet0.3
AP(config-subif)#bridge group 3
AP(config-subif)# encapsulation dot1Q 3
!
AP(config)#bridge irb
Ap(config)# bridge 1 route ip
Ap(config)# end
Ap#wr

Multiple SSID With Multiple VLANs  

cisco controller add outdoor ap

cisco controller add outdoor ap