management: Self-healing, assisted site survey, automatic re-site survey, interference detection, and associated access point tracking for clients

Simplified operations: Template-based configuration and image updates, reporting, and threshold-based monitoring

The screen shot in Figure represents one of the many uses of CiscoWorks WSLE. This example illustrates scanning and monitoring capabilities showing the locations and coverage of Cisco Aironet access points on a building plan. CiscoWorks WLSE and WLSE Express
CiscoWorks WLSE is used for centralized management of wireless networks that use autonomous access points. CiscoWorks WLSE supports the following WLAN devices:

Cisco Aironet autonomous access points and bridges
Access point- and Cisco Catalyst 6500 Series Wireless LAN Services Module (WLSM)-based WDS

CiscoWorks WLSE supports Secure Shell (SSH), HTTP, CDP, and SNMP host resources MIB. CiscoWorks WLSE integrates with CiscoWorks wired management tools and third-party network management systems (NMSs):

Simple Object Access Protocol (SOAP) Extensible Markup Language (XML) application programming interface (API) for data export
SNMP trap and syslog forwarding for faults

Figure illustrates the two available versions of CiscoWorks WLSE. Each version meets the needs of different network sizes and topologies:

CiscoWorks WLSE: CiscoWorks WLSE supports medium to large enterprise and wireless verticals (up to 2500 WLAN devices).
CiscoWorks WLSE Express: CiscoWorks WLSE Express provides a cost-effective solution with integrated WLAN management and security services to small to medium businesses (SMBs) (250 to 1500 employees) and commercial and branch offices (up to 100 WLAN devices).

Enterprise branch office deployments usually want to localize WLAN security and management services to provide WLAN access survivability during WAN failures and not use their WAN bandwidth for WLAN and RF management traffic. Some service providers can use CiscoWorks WLSE Express because public WLAN (PWLAN) hot-spot management requires fewer WLAN devices. CiscoWorks WLSE requires an external AAA server, which is already included with CiscoWorks WLSE Express. CiscoWorks WLSE Express has integrated WLAN security and management services that support 802.1x LEAP, Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST), and Extensible Authentication Protocol-Transport Layer Security (EAP-TLS). The user directory supports Lightweight Directory Access Protocol (LDAP), Microsoft Active Directory, and a local user database. CiscoWorks WLSE Express services support both wired and wireless user authentication and WLAN IDS features.

Content 6.3 Managing WLANs 6.3.4 Simplified CiscoWorks WLSE Express Setup You can use manual setup commands, but using CiscoWorks WLSE Express simplifies the setup, as described in Figure :

Automatic: After you have installed CiscoWorks WLSE Express, you can arrange for CiscoWorks WLSE to be autoconfigured. As each CiscoWorks WLSE is started for the first-time, a special configuration file is automatically downloaded, and CiscoWorks WLSE is ready for use. The configuration is downloaded from a DHCP server. The DHCP option is enabled by default. A TFTP IP address and filename are provided with options 66 and 67. CiscoWorks WLSE Express downloads a configuration, including host name, default gateway, and so on.
Manual: By default, the CiscoWorks WLSE Express Ethernet interface is set to DHCP mode. When powered on, a CiscoWorks WLSE attempts to obtain the network configuration from a DHCP server. If you do not want to configure a DHCP server with this information, you can log in and configure the network parameters manually after CiscoWorks WLSE starts. You can manually configure CiscoWorks WLSE Express using the setup script and entering command-line interface (CLI) commands.

Configuration Templates
CiscoWorks WLSE has a web-based GUI with templates for configuration. Figure shows the interface template. Besides configuration and monitoring, CiscoWorks WLSE supports performance optimization and high availability. CiscoWorks WLSE supports centralized configuration and image management using several templates:

Plug-and-play deployment
Automatic configuration of access points added to CiscoWorks WLSE
Automatic RF configuration of access points
Calculation of optimal RF configurations by access points

CiscoWorks WLSE includes WLAN intrusion detection with the following features:

Detection of location and automatic shutdown of rogue access points via disabled switch ports
Ad hoc network detection
Man-in-middle detection by monitoring message integrity check (MIC) failures
Access point configuration monitor to ensure that security policies are always enforced
Sensor mode access points that can augment WLAN deployments for enhanced features

CiscoWorks WLSE is designed for all day-to-day operations as well as for performance optimization and high availability using built-in Auto Re-Site Survey and Self Healing tools. Using Auto Re-Site Survey, CiscoWorks WLSE can provide optimal channel and power-level settings based on the access point air and RF monitoring phase of Assisted Site Survey only. Client walkabout is not needed, but performing client walkabouts during the Assisted Site Survey is recommended. Client walkabout increases the coverage for RF management and makes the survey more effective. CiscoWorks WLSE can detect that an access point has failed. CiscoWorks WLSE compensates for the loss by automatically increasing the power and cell coverage of nearby access points. The Self Healing feature minimizes the outage impact to wireless client devices and maximizes the availability of wireless applications. Self Healing also recalculates power coverage when the radio comes back up.

Content 6.3 Managing WLANs 6.3.5 CiscoWorks WLSE Benefits CiscoWorks WLSE reduces total cost of ownership, minimizes security vulnerabilities, and improves WLAN uptime. Figure summarizes the features and benefits of CiscoWorks WLSE:

CiscoWorks WLSE supports centralized configuration, firmware, and radio management, which reduces WLAN total cost of ownership by saving the time and resources that you require to manage large numbers of access points. CiscoWorks WLSE aggregates all configurations, images, and management information in one place.
Templates, one of the features of CiscoWorks WLSE, allow autoconfiguration of new access points for simplified large-scale deployment of access points. When a new access point is added to the system, you can use the template to configure the access point.
Access points that you add to the system require correct configuration. CiscoWorks WLSE detects misconfiguration and follows with an alert. This process is also the process CiscoWorks WLSE uses to detect a rogue access point and to minimize security vulnerabilities.
CiscoWorks WLSE is capable of monitoring access point use and client association. You can use a report that includes the number of access points and clients for capacity planning and troubleshooting.
The CiscoWorks WLSE configuration templates are not only used for new access points. The system allows proactive monitoring of access points, bridges, and 802.1x EAP servers. The system is able to push down configuration changes to access points, improving WLAN uptime.

Content 6.3 Managing WLANs 6.3.6 Cisco WCS for the LWLAN Solution Cisco WCS is a Cisco WLAN solution network-management tool that adds to the capabilities of the web user interface and CLI, moving from individual controllers to a network of controllers. Cisco WCS