09-24-2015 12:00 PM - edited 07-05-2021 03:59 AM
Hi,
Is there a way to select with what controller can an AP register ? I have 40APs and 2 controllers and I want to be able to choose with what controllers an AP will register based on MAC Address?
Thank you!
Solved! Go to Solution.
09-25-2015 03:57 AM
On the WLC, use the AP authorization list to restrict LAPs based on their MAC address. The AP authorization list is available under Security > AP Policies in the WLC GUI.
Complete these steps:
From the WLC controller GUI, click Security > AP Policies.
The AP Policies page appears.
Under Policy Configuration, check the box for Authorize APs against AAA.
When this parameter is selected, the WLC checks the local authorization list first. If the LAP's MAC is not present, it checks the RADIUS server.
Click the Add button on the right hand side of the screen.
Under Add AP to Authorization List, enter the AP MAC address. Then, choose the certificate type and click Add.
09-24-2015 05:51 PM
Hi,
Are these new APs or production APs. If new, you could prime the AP by manually specifying what controller to connect to. If these are production access points, you could use the High Availability tab on the AP configuration page of the controller.
Thanks
John
09-25-2015 01:24 AM
Hi Catalin,
1. Yes you can use the Authorize AP's against AAA.
2. By enabling this feature, only those AP's whose mac-addresses are present in the authorization list of WLC, will be able to register to the it.
3. Allow 20 mac of AP in WLC1 and another 20 mac address of AP in WLC2.
Here is the explanation:
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98848-lap-auth-uwn-config.html
Regards
Don't forget to rate helpful posts
09-25-2015 03:57 AM
On the WLC, use the AP authorization list to restrict LAPs based on their MAC address. The AP authorization list is available under Security > AP Policies in the WLC GUI.
Complete these steps:
From the WLC controller GUI, click Security > AP Policies.
The AP Policies page appears.
Under Policy Configuration, check the box for Authorize APs against AAA.
When this parameter is selected, the WLC checks the local authorization list first. If the LAP's MAC is not present, it checks the RADIUS server.
Click the Add button on the right hand side of the screen.
Under Add AP to Authorization List, enter the AP MAC address. Then, choose the certificate type and click Add.
09-26-2015 09:45 AM
thank you all!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide