MSM7xx Controllers Configuration Guide v6.4.0

8 Working with controlled APs
Key concepts
The controller provides centralized management of APs operating in controlled mode. Controlled
mode greatly simplifies the set up and maintenance of a Wi-Fi infrastructure by centralizing the
configuration and management of distributed APs.
NOTE: Starting with software version 5.x, APs operate in controlled mode by default. If you
update an AP from an earlier release, the AP boots in autonomous mode. Subsequently resetting
the AP to factory defaults switches it to controlled mode. For details on working with autonomous
APs, see “Working with autonomous APs” (page 533), and “Resetting to factory defaults” (page 547).
Plug and play installation
In most cases, initial configuration of an AP is not required. Simply power it up and plug it into a
network that provides access to a controller. The AP will automatically discover and authenticate
itself with the controller. The AP does not offer wireless services until it successfully connects and
synchronizes with a controller. Layer 3 networks may require the APs first to be provisioned.
Automatic software updates
Once an AP establishes a management tunnel with a controller its software is automatically updated
to match the version installed on the controller.
Centralized configuration management
All AP configuration settings are defined using the controller management tool and are automatically
uploaded to all controlled APs with a single mouse select. For added flexibility, APs can be assigned
to groups, enabling each group to have customized configuration settings. If needed, the individual
settings for each AP in a group can also be customized.
Manual provisioning
By default, APs operating in controlled mode will automatically discover and connect with a
controller on most network topologies. However, in certain cases it may be necessary to manually
configure (provision) connectivity and discovery options. Manual provisioning can be done directly
on the AP, or via the controller. When using the controller, provisioning can be applied to entire
groups making it easy to customize many APs at once. When working with a controller team, APs
must be provisioned to discover each team member to ensure that failover is supported. The APs
must be able to migrate to a new team member if the current team member with which they are
associated becomes unavailable.
Secure management tunnel
Once authenticated, a secure management tunnel is established between the AP and the controller
to support the exchange of management traffic between the two devices.
AP authentication
The controller can be configured to authenticate APs by their MAC address before they are
managed. The authentication can be defined locally on the controller, via a third-party RADIUS
server, or using a remote text-based control file. Another method is to use authentication during
discovery option. See “Discovery authentication” (page 176) and “Discovery authentication”
(page 154).
Key concepts 145