cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4267
Views
5
Helpful
4
Replies

AP Registration with Controller

Catalin Sandu
Level 1
Level 1

Hi,

Is there a way to select with what controller can an AP register ? I have 40APs and 2 controllers and I want to be able to choose with what controllers an AP will register based on MAC Address?

Thank you!

 

1 Accepted Solution

Accepted Solutions

mohanak
Cisco Employee
Cisco Employee

On the WLC, use the AP authorization list to restrict LAPs based on their MAC address. The AP authorization list is available under Security > AP Policies in the WLC GUI.

 

Complete these steps:

  1. From the WLC controller GUI, click Security > AP Policies.

    The AP Policies page appears.

  2. Under Policy Configuration, check the box for Authorize APs against AAA.

    When this parameter is selected, the WLC checks the local authorization list first. If the LAP's MAC is not present, it checks the RADIUS server.

  3. Click the Add button on the right hand side of the screen.

  4. Under Add AP to Authorization List, enter the AP MAC address. Then, choose the certificate type and click Add.

     

View solution in original post

4 Replies 4

johnd2310
Level 8
Level 8

Hi,

Are these new APs or production APs. If new, you could prime the AP  by manually specifying what controller to connect to. If these are production access points, you could use the High Availability   tab on the AP configuration page of the controller.

 

Thanks

John

**Please rate posts you find helpful**

Sandeep Choudhary
VIP Alumni
VIP Alumni

Hi Catalin,

1. Yes you can use the Authorize AP's against AAA.

2. By enabling this feature, only those AP's whose mac-addresses are present in the authorization list of WLC, will be able to register to the it.

3. Allow 20 mac of AP in WLC1 and another 20 mac address of AP in WLC2.

Here is the explanation:

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98848-lap-auth-uwn-config.html

 

Regards

Don't forget to rate helpful posts

mohanak
Cisco Employee
Cisco Employee

On the WLC, use the AP authorization list to restrict LAPs based on their MAC address. The AP authorization list is available under Security > AP Policies in the WLC GUI.

 

Complete these steps:

  1. From the WLC controller GUI, click Security > AP Policies.

    The AP Policies page appears.

  2. Under Policy Configuration, check the box for Authorize APs against AAA.

    When this parameter is selected, the WLC checks the local authorization list first. If the LAP's MAC is not present, it checks the RADIUS server.

  3. Click the Add button on the right hand side of the screen.

  4. Under Add AP to Authorization List, enter the AP MAC address. Then, choose the certificate type and click Add.

     

Catalin Sandu
Level 1
Level 1

thank you all!

Review Cisco Networking products for a $25 gift card