topic Re: Essential Security settings on Mobility Express/WLC in Wireless

Essential Security settings on Mobility Express/WLC

pdenableetoavit19698 — Fri, 03 Mar 2023 09:23:46 GMT

Hi there,

currently reviewing settings of a set of AP under MobilityExpress/WLC and wondering :

- what are the best/ideal settings to have/implement across the AP (I understand this depends on situations etc but generally...)

- current update is 8.10.162.0, needed to go to the latest one for better security (I understand there is https implemented for the GUI, but anything else relevant as far as you know?

- any other comment/tip welcome!

thanks !

Re: Essential Security settings on Mobility Express/WLC

Mark Elsen — Fri, 03 Mar 2023 09:39:56 GMT

>...currently reviewing settings of a set of AP under MobilityExpress/WLC and wondering... :
You can always have the configuration of the mobility express controller analyzed with https://cway.cisco.com/wireless-config-analyzer/ ; for that
1. Type "config paging disable" in priviledged mode to set your terminal to display without any breaks.
2. Type "show run-config" to display the config.

Feed the output into : https://cway.cisco.com/tools/WirelessAnalyzer/

Re: Essential Security settings on Mobility Express/WLC

pdenableetoavit19698 — Fri, 03 Mar 2023 10:42:06 GMT

Thanks, should you run the command from the Controller AP? so do you have to plugin to the console port of that AP or you can do that from any AP console port?

Re: Essential Security settings on Mobility Express/WLC

Mark Elsen — Fri, 03 Mar 2023 10:46:26 GMT

- You should do that on the Controller AP , which can normally also be reached through SSH,

Re: Essential Security settings on Mobility Express/WLC

Scott Fella — Fri, 03 Mar 2023 14:39:07 GMT

Use the wireless analyzer like what @Mark Elsen provided in a link, that will get you started. Some of the GUI's have. best practice page which also provides recommendations. With any tool, you also need to be aware of your environment as enabling a feature can also break something. With experience, you know what works and doesn't and that is where experienced folks start or how they build their templates.

Re: Essential Security settings on Mobility Express/WLC

Rich R — Sat, 04 Mar 2023 13:13:49 GMT

Also see the best practices guide link below:

Re: Essential Security settings on Mobility Express/WLC

pdenableetoavit19698 — Wed, 08 Mar 2023 08:04:12 GMT

thanks for tip @Mark Elsen

can join on putty on serial, but have not been successful with ssh

whats the best way to go? have tried also from macos terminal using the ssh option but maybe entering info the wrong way?

Re: Essential Security settings on Mobility Express/WLC

Mark Elsen — Wed, 08 Mar 2023 09:28:49 GMT

- Make sure SSH access is configured and allowed ,