User's Manual

4/1/05 Local MAC Filter
OL-7426-02
IPSec PassthroughIPSec Passthrough
IPSec IKE uses IPSec Passthrough to allow IPSec-capable clients to communicate directly with other
IPSec equipment. IPSec Passthrough is also known as VPN Passthrough.
• Use the show wlan command to see the current IPSec passthrough status.
• Use the following command to configure IKE passthrough for a WLAN:
>config wlan security passthru [enable/disable] <WLAN id> [gateway]
where <WLAN id> = 1 through 16, and [gateway] = IP Address of IPSec (VPN) passthrough
gateway.
• Use the show wlan command to verify that you have IPSec passthrough properly set.
Web Based AuthenticationWeb Based Authentication
WLANs can use Web Authentication if IPSec is not enabled on the Cisco Wireless LAN Controller. Web
Authentication is simple to set up and use, and can be used with SSL to improve the overall security of
the wireless LAN.
• Use the show wlan command to see the current Web Authentication status.
• Use the following command to configure Web Authentication for a WLAN:
>config wlan security web [enable/disable] <WLAN id>
where <WLAN id> = 1 through 16.
• Use the show wlan command to verify that you have Web Authentication properly set.
Local NetuserLocal Netuser
Cisco Wireless LAN Controllers have built-in network client authentication capability, similar to that
provided by a RADIUS authentication server.
• Use the show netuser command to see if the Cisco Wireless LAN Controller has network client
names assigned to WLANs.
• If required, use the following commands to assign a network client name and password to a
particular WLAN, delete a network client, assign a network client password, and assign a
network client name to a WLAN without a password:
>config netuser add <username> <password> <WLAN id>
>config netuser delete <username>
>config netuser password <username> <password>
>config netuser wlan-id <username> <WLAN id>
where <WLAN id> = 1 through 16.
• Use the show netuser command to verify that you have net usernames assigned to WLANs.
Quality of ServiceQuality of Service
Cisco SWAN WLANs support four levels of QoS: Platinum/Voice, Gold/Video, Silver/Best Effort (default)
and Bronze/Background. Network administrators can choose to assign the voice traffic WLAN to use
Note: WLANs are created in disabled mode; leave them disabled until you have
finished configuring them.
Note: WLANs are created in disabled mode; leave them disabled until you have
finished configuring them.