User's Manual

4/1/05 Configuring Cisco Wireless LAN Controller Interfaces
OL-7426-02
• Be sure these protocols are configured to agree with your wireless network plan and to comply
with the Country Code entered in the previous step using the following commands:
>config 802.11a enable network
>config 802.11a disable network
>config 802.11b enable network
>config 802.11b disable network
• Use the show sysinfo command to verify that the Cisco Wireless LAN Controller has stored
your input. Continue with the next parameter.
Users and PasswordsUsers and Passwords
After you have configured other system parameters, you are urged to change the username and
password so unauthorized personnel cannot easily log into the Cisco SWAN.
• Use the show mgmtuser command to view the current management usernames.
• Use the following commands to add new usernames and add or change passwords:
>config mgmtuser add <username> <password> [read-write/read-only]
>config mgmtuser password <username> <new password>
where <username>, <password> and <new password> = Any ASCII character string, up to 24
characters, case sensitive, with no spaces.
• Use the show mgmtuser command to verify that your users have been accepted by the system.
Continue with Configuring Cisco Wireless LAN Controller Interfaces.
Configuring Cisco Wireless LAN Controller InterfacesConfiguring Cisco Wireless LAN Controller Interfaces
As described in the Distribution System Ports section, the Cisco 2000 Series Wireless LAN Controller
has four independent physical ports, and the Cisco 4100 Series Wireless LAN Controller has two
redundant physical ports. This means that the Cisco 2000 Series Wireless LAN Controller can connect to
up to four separate subnets, and that the Cisco 4100 Series Wireless LAN Controller can physically
connect to one subnet.
Each of the physical ports can have multiple Interfaces applied to it:
• The Management Interface controls communications with network equipment for all physical
ports in all cases.
When the Cisco SWAN is operated in Layer 2 Mode (see Layer 2 and Layer 3 LWAPP Operation
),
the Management Interface also controls communications between the Cisco Wireless LAN
Controller and Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access Points
.
When the Cisco SWAN is operated in Layer 3 Mode, the Management Interface no longer
controls communications between the Cisco Wireless LAN Controllers and Cisco 1000 Series
lightweight access points.
• When the Cisco SWAN is operated in Layer 3 Mode (see Layer 2 and Layer 3 LWAPP Operation),
the AP-Manager Interface
controls all communications between the Cisco Wireless LAN
Controller and Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access Points
.
• Each physical port can also have between one and 512 Operator-Defined Interfaces, also
known as VLAN Interfaces, assigned to it. Each Operator-Defined Interface is individually
configured, and allows separate communication streams to exist on any or all of the physical
port(s).
• The Virtual Interface controls Layer 3 Security and Mobility manager communications for Cisco
Wireless LAN Controllers for all physical Ports. It also maintains the DNS Gateway hostname
used by Layer 3 Security and Mobility managers to verify the source of certificates when
Layer 3 Web Authorization is enabled.