management: Self-healing, assisted site
survey, automatic re-site survey, interference detection, and
associated access point tracking for clients
Simplified operations: Template-based configuration and
image updates, reporting, and threshold-based monitoring
The screen shot in Figure represents one
of the many uses of CiscoWorks WSLE. This example illustrates
scanning and monitoring capabilities showing the locations and
coverage of Cisco Aironet access points on a building plan.
CiscoWorks WLSE and WLSE Express
CiscoWorks WLSE is
used for centralized management of wireless networks that use
autonomous access points. CiscoWorks WLSE supports the
following WLAN devices: - Cisco Aironet autonomous
access points and bridges
- Access point- and Cisco
Catalyst 6500 Series Wireless LAN Services Module (WLSM)-based
WDS
CiscoWorks WLSE supports Secure Shell (SSH),
HTTP, CDP, and SNMP host resources MIB. CiscoWorks WLSE
integrates with CiscoWorks wired management tools and
third-party network management systems (NMSs): - Simple
Object Access Protocol (SOAP) Extensible Markup Language (XML)
application programming interface (API) for data export
- SNMP trap and syslog forwarding for faults
Figure illustrates the two available versions of CiscoWorks
WLSE. Each version meets the needs of different network sizes
and topologies: - CiscoWorks WLSE: CiscoWorks
WLSE supports medium to large enterprise and wireless verticals
(up to 2500 WLAN devices).
- CiscoWorks WLSE
Express: CiscoWorks WLSE Express provides a cost-effective
solution with integrated WLAN management and security services
to small to medium businesses (SMBs) (250 to 1500 employees)
and commercial and branch offices (up to 100 WLAN devices).
Enterprise branch office deployments usually want
to localize WLAN security and management services to provide
WLAN access survivability during WAN failures and not use their
WAN bandwidth for WLAN and RF management traffic. Some service
providers can use CiscoWorks WLSE Express because public WLAN
(PWLAN) hot-spot management requires fewer WLAN devices.
CiscoWorks WLSE requires an external AAA server, which is
already included with CiscoWorks WLSE Express. CiscoWorks WLSE
Express has integrated WLAN security and management services
that support 802.1x LEAP, Protected Extensible Authentication
Protocol (PEAP), Extensible Authentication Protocol-Flexible
Authentication via Secure Tunneling (EAP-FAST), and Extensible
Authentication Protocol-Transport Layer Security (EAP-TLS). The
user directory supports Lightweight Directory Access Protocol
(LDAP), Microsoft Active Directory, and a local user database.
CiscoWorks WLSE Express services support both wired and
wireless user authentication and WLAN IDS features.
Content 6.3 Managing WLANs
6.3.4 Simplified CiscoWorks WLSE Express Setup You
can use manual setup commands, but using CiscoWorks WLSE
Express simplifies the setup, as described in Figure :
- Automatic: After you have installed CiscoWorks WLSE
Express, you can arrange for CiscoWorks WLSE to be
autoconfigured. As each CiscoWorks WLSE is started for the
first-time, a special configuration file is automatically
downloaded, and CiscoWorks WLSE is ready for use. The
configuration is downloaded from a DHCP server. The DHCP option
is enabled by default. A TFTP IP address and filename are
provided with options 66 and 67. CiscoWorks WLSE Express
downloads a configuration, including host name, default
gateway, and so on.
- Manual: By default, the
CiscoWorks WLSE Express Ethernet interface is set to DHCP mode.
When powered on, a CiscoWorks WLSE attempts to obtain the
network configuration from a DHCP server. If you do not want to
configure a DHCP server with this information, you can log in
and configure the network parameters manually after CiscoWorks
WLSE starts. You can manually configure CiscoWorks WLSE Express
using the setup script and entering command-line interface
(CLI) commands.
Configuration Templates
CiscoWorks WLSE has a web-based GUI with templates for
configuration. Figure shows the interface template. Besides
configuration and monitoring, CiscoWorks WLSE supports
performance optimization and high availability. CiscoWorks WLSE
supports centralized configuration and image management using
several templates: - Plug-and-play deployment
- Automatic configuration of access points added to
CiscoWorks WLSE
- Automatic RF configuration of access
points
- Calculation of optimal RF configurations by
access points
CiscoWorks WLSE includes WLAN
intrusion detection with the following features: -
Detection of location and automatic shutdown of rogue access
points via disabled switch ports
- Ad hoc network
detection
- Man-in-middle detection by monitoring
message integrity check (MIC) failures
- Access point
configuration monitor to ensure that security policies are
always enforced
- Sensor mode access points that can
augment WLAN deployments for enhanced features
CiscoWorks WLSE is designed for all day-to-day operations as
well as for performance optimization and high availability
using built-in Auto Re-Site Survey and Self Healing tools.
Using Auto Re-Site Survey, CiscoWorks WLSE can provide optimal
channel and power-level settings based on the access point air
and RF monitoring phase of Assisted Site Survey only. Client
walkabout is not needed, but performing client walkabouts
during the Assisted Site Survey is recommended. Client
walkabout increases the coverage for RF management and makes
the survey more effective. CiscoWorks WLSE can detect that an
access point has failed. CiscoWorks WLSE compensates for the
loss by automatically increasing the power and cell coverage of
nearby access points. The Self Healing feature minimizes the
outage impact to wireless client devices and maximizes the
availability of wireless applications. Self Healing also
recalculates power coverage when the radio comes back up.
Content 6.3 Managing WLANs
6.3.5 CiscoWorks WLSE Benefits CiscoWorks WLSE
reduces total cost of ownership, minimizes security
vulnerabilities, and improves WLAN uptime. Figure summarizes
the features and benefits of CiscoWorks WLSE:
- CiscoWorks WLSE supports centralized configuration,
firmware, and radio management, which reduces WLAN total cost
of ownership by saving the time and resources that you require
to manage large numbers of access points. CiscoWorks WLSE
aggregates all configurations, images, and management
information in one place.
- Templates, one of the
features of CiscoWorks WLSE, allow autoconfiguration of new
access points for simplified large-scale deployment of access
points. When a new access point is added to the system, you can
use the template to configure the access point.
- Access
points that you add to the system require correct
configuration. CiscoWorks WLSE detects misconfiguration and
follows with an alert. This process is also the process
CiscoWorks WLSE uses to detect a rogue access point and to
minimize security vulnerabilities.
- CiscoWorks WLSE is
capable of monitoring access point use and client association.
You can use a report that includes the number of access points
and clients for capacity planning and troubleshooting.
- The CiscoWorks WLSE configuration templates are not only
used for new access points. The system allows proactive
monitoring of access points, bridges, and 802.1x EAP servers.
The system is able to push down configuration changes to access
points, improving WLAN uptime.
Content
6.3 Managing WLANs 6.3.6
Cisco WCS for the LWLAN Solution Cisco WCS is a Cisco
WLAN solution network-management tool that adds to the
capabilities of the web user interface and CLI, moving from
individual controllers to a network of controllers. Cisco WCS