Essential Security settings on Mobility Express/WLC

[pdenableetoavit19698]

Hi there,

currently reviewing settings of a set of AP under MobilityExpress/WLC and wondering :

- what are the best/ideal settings to have/implement across the AP (I understand this depends on situations etc but generally...)

- current update is 8.10.162.0, needed to go to the latest one for better security (I understand there is https implemented for the GUI, but anything else relevant as far as you know?

- any other comment/tip welcome!

thanks !

[Mark Elsen]

       >...currently reviewing settings of a set of AP under MobilityExpress/WLC and wondering... :
  You can always have the configuration of the mobility express controller analyzed with https://cway.cisco.com/wireless-config-analyzer/ ; for that 
        1. Type "config paging disable" in priviledged mode to set your terminal to display without any breaks.
        2. Type "show run-config" to display the config.

                       Feed the output into : https://cway.cisco.com/tools/WirelessAnalyzer/

 M.

[pdenableetoavit19698]

Thanks, should you run the command from the Controller AP? so do you have to plugin to the console port of that AP or you can do that from any AP console port?

[Mark Elsen]

 - You should do that on the Controller AP  , which can normally also be reached through SSH, 

 M.

[pdenableetoavit19698]

thanks for tip @Mark Elsen 

can join on putty on serial, but have not been successful with ssh

whats the best way to go? have tried also from macos terminal using the ssh option but maybe entering info the wrong way?

[Mark Elsen]

    - Make sure SSH access is configured and allowed , 

 M.

[Scott Fella]

Use the wireless analyzer like what @Mark Elsen provided in a link, that will get you started.  Some of the GUI's have. best practice page which also provides recommendations.  With any tool, you also need to be aware of your environment as enabling a feature can also break something.  With experience, you know what works and doesn't and that is where experienced folks start or how they build their templates.

[Rich R]

Also see the best practices guide link below: