from a central server or statically from a system administrator.

SNMP Community: The Simple Network Management Protocol community name required by the trap destination before it records traps sent by the device.

Additionally, you can configure parameters for the radio interfaces. Radio interfaces are enabled from the Network Interfaces option in the menu on the left. You can configure SSIDs from the Express Security or the Security menu option.

Content 6.6 Implementing Wireless LANs 6.6.4 Lightweight WLAN Controller Configuration The initial configuration of the WLAN controller can be done using the CLI from the serial console or using a Web browser via the service port. However, the Cisco 2000 Series Wireless LAN Controller (WLC) does not have the service port. The WLAN configuration requires that the IP addresses be configured on the WLAN controller. The WLAN configuration can be done using the following:

Web browser
CLI via the serial console, Telnet, or SSH
Cisco Wireless Control System (WCS), which allows centralized configuration of the Cisco WLCs

Figure lists the interfaces on a Cisco WLC:

Service port: Used for out-of-band management, including initial setup of the WLAN controller. It has to be connected to a different subnet than the other interfaces. On the Cisco 2006 WLC, no service port is available.
Management interface: Used by the lightweight access points to associate to the WLAN controller. There is one management interface per WLAN controller.
AP manager interface: Used for all LWAPP traffic between the lightweight access points and the WLAN controller. You can configure more than one management interface per WLAN controller.
Virtual interface: Unique IP address per mobility group used for communication between the access point and the controller for mobility, DHCP relay, Web authentication, and IP Security (IPSec). A mobility group is a group of WLAN controllers that are implementing Layer 3 roaming.
User interface: Carries the data traffic into different VLANs. One user interface is configured per VLAN. The SSIDs are mapped to the VLANs.

Content 6.6 Implementing Wireless LANs 6.6.5 Cisco Wireless LAN Controller Boot Menu On the console port, you see the boot messages of the WLAN controller during the boot process. Press the Escape key for these additional boot options:

Select 1 to continue to boot the primary image (default).
Select 2 to boot the backup image (image used before last software upgrade).
Select 3 for manual upgrade of image files.
Select 4 to set the backup image as the primary image.
Select 5 to clear the configuration and start the CLI setup wizard.

Note: Option 3 is for recovery only. Do not select this option unless you have the required files and are instructed to do so by the Cisco TAC. Figure shows the first part of the initial configuration of a Cisco WLC 2006 WLAN controller via the serial console:

The minus key (–) returns you to the previous question.
Commands are case-sensitive, and uppercase options are default values.
The controller name supports up to 32 printable ASCII characters.
The administration username and password are configured.
The management interface IP address, netmask, default gateway, VLAN, port number, and DHCP server are configured.
The AP manager interface is configured with an IP address that is in the same subnet as the management interface.

Figure shows the remainder of the CLI configuration:

The virtual gateway IP address must be an unassigned unreachable IP address.
Static IP defines if a DHCP server must be used by WLAN clients or if they may configure a static address to use the WLAN.
The initial WLAN defaults to 802.1x security to ensure that there is no accidental access.
The country code defines which channels, frequencies, and power output are available per the country regulations.
Auto-RF enables auto RF functions.
The configuration is saved and the controller is rebooted after the final value of the CLI wizard.

Figure shows three CLI configuration commands:

The config network webmode enable command enables Web mode, which allows HTTP access to the WLAN controller. Secure Socket Layer (SSL) (HTTPS) access is enabled by default.
The config network telnet enable command enables Telnet, which allows Telnet access to the CLI of the WLAN controller. SSH access is enabled by default.
The config prompt name command configures the system prompt, which usually is configured with the system name.

Content 6.6 Implementing Wireless LANs 6.6.6 Web Wizard Initial Configuration The Cisco 4400 Series WLAN controller supports the initial configuration via Web browser through the service port. The default IP address of the unconfigured controller is 192.168.1.1/24 with admin as the default username and password. and Cisco recommends using Internet Explorer 6.0 with Service Pack 1 (SP1) or higher for full switch Web interface functionality. There are known issues with Opera, Mozilla, and Netscape. You can connect using either http://<controller IP address> or https://<controller IP address>, but HTTP is disabled by default. You can disable either HTTP or HTTPS access. If you receive the error message “The page cannot be displayed,” check to see if the corresponding access method has been disabled. The WLAN controller Web interface has a default inactivity timeout of 10 minutes. Figure shows the tabs and settings available for each tab. Figure shows the homepage of the lightweight access point, which is displayed when you connect to the WLAN controller. The following figures show screenshots from the Web interface of the WLAN controller. Figure shows the physical ports of a Cisco WLC 2006 WLAN controller. Figure shows the statistics of physical port 1 of a Cisco WLC2006 controller. Figure shows the configured WLAN SSIDs. Figure shows details of the configured WLAN SSID open11. Figure shows the general configuration of a Cisco WLC2006 controller. The controller operates in Layer 3 LWAPP transport mode. Figure shows the logical interfaces of a Cisco WLC2006 controller. Figure shows the configuration of the management interface of the controller. Figure shows access points registered to the WLAN controller. Figure shows details of an access point with name and IP address. You can use the buttons at the bottom of the screen to reset this access point or clear the configuration of this access point. Figure shows the access points with an 802.11b/g radio and the current channel and power level. Figure shows details of the 802.11b/g radio of this access point. This page allows you to configure channel and power level, if required. Figure shows an overview of the management settings for this wireless LAN controller. From the menu on the left, you can configure management options such as SNMP, HTTP, SSH, and logging. The Commands menu gives you options to upgrade software, save configurations, reboot the wireless LAN controller, and clear the configuration of the WLAN controller.

Content 6.7 WLAN Lab Exercises 6.7.1 Lab 6-1 Configuring a WLAN Controller Lab Activity Lab Exercise: Lab 6-1 Configuring a WLAN Controller In the next two labs, you will configure a wireless solution involving a WLAN controller, two lightweight wireless access points, and a switched wired network. You will configure a WLAN controller to broadcast SSIDs from the lightweight wireless access points. If you have a wireless client nearby, connect to the WLANs and access