Wireless Integration

[ajkhader123]

Hi All,

I have Catalys 3560 switch, I am planning to add WLC 4402 on the network, will it work with this series switches.

Regards,

Abdul...

[ericgarnel]

Yes. You will need some transceivers between the two. You can use either copper or fiber transceivers depending on what is available on your 3560 switch.

Either way, you will need to setup 2 ports on the 3560 to trunk dot1q with the controller.

You can use etherchannel on the switch if you put the controller in "lag" mode, or just leave the two trunks separate. If you do not use 'lag' on the controller, you will need to create 2 ap-manager interfaces and alternate the physical port priority between them

[ajkhader123]

Hello Eric,

Thanks for your quik response, can u please elobrate alternating the physical port priority.

[ericgarnel]

When you configure the ap management interfaces under the controller | interfaces menu, you will specify the physical information as follows

port number

backup port

It will then list the port number setting as the active port. You will then reverse the physical port numbers on the other ap management interface. You could also use 'lag', but you will still need 2 ap management interfaces to get all 50 APs supported

[ajkhader123]

Eric,

Good explanation, adding to this is it possible to get an authentication from Active directory after loggin in with Radius authentication, like second level authentication, is it possible to do.

[ericgarnel]

Yes.

See here:

www.cisco.com/en/US/products/ps6307/products_tech_note09186a0080870334.shtml

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008082d5b5.shtml

http://www.tek-tips.com/viewthread.cfm?qid=1430999&page=5

http://www.cisco.com/en/US/products/ps6308/products_qanda_item09186a008082c464.shtml

[ajkhader123]

Hey Eric,

Thank u so much for answering all my question, i would like to get continued this conversation, will get back with some queries later,

Thanks,

Abdul...

[ajkhader123]

Hi Eric,

Back again, is there any authentication method for AP's to get registered with WLC, like i am priming AP with WLC, when i connect other AP on the network it should not get registered, is there any authentication can be enabled for AP's not be registered with WLC.

[ericgarnel]

Not sure what you are asking....

are you referring to wireless protection policies?

[ajkhader123]

I am adding only 5 AP on the network, i would like to know when any one try to add a new AP they should be promted for Authentication, is it possible to do so.

[Scott Fella]

In an LWAPP install, you can authenticate an AP to a AAA server.

[ajkhader123]

Hey fella,

Can u please explain this in detail.

Thanks.

[Scott Fella]

Here you go:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml#a1

[ajkhader123]

This is for MAC, I would like to know how we create authentication B/W WLC and AP with WAP2-AES, this setup has been worked out in a wireless network.

Thanks