Guide to configuring eduroam using a Cisco wireless controller Best ...

More documents

Recommendations

Info

5 Physical installation of access points Where the access points are to be located has been determined by radio planning. The physical installation of the access points involves first the establishment of new network points at the locations of the access points. These points must then be patched to a switch and the access point must be installed. Most access points support PoE, i.e. 802.3af. Some newer access points which support 802.11n require more power and consequently one must have 802.3at. PoE is far more practical and usually cheaper than installing a separate power outlet close to the access point and connecting a permanent power supply. That solution also results in the loss of the possibility of remotely controlling the power supply in order to switch the access point on or off. Naturally, one must not use Cat 5 cable splitting with PoE (i.e. divide the four pairs into two connections each with two pairs). A disadvantage with using PoE is the extra heat it generates. The PoE switches often cause a rise in temperature, especially in smaller rooms and cabinets where they are often placed. To provide PoE to the access point one will need either a PoE-compatible switch or a PoE injector. Most access points are supplied with some form of installation kit. Follow the installation instructions for the access point. Note that the correct way to install a Cisco AP1130/AP1140/3500i is with the flat, plastic surface down. In other words, it is not optimally located when attached to a wall, although this is possible and probably preferred in some cases. This issue should have been determined during the radio planning. The radio should be located at least 20 centimetres from any metal objects. 32 - Install wiring between switch and access point - Install access point/access points - Use power preferably by way of PoE from the switch, or through injector
A. Configuration using autonomous access points The following is a description of how configuration may be carried out using autonomous access points. As mentioned earlier, this type of configuration is not recommended from the point of view of security. A.1 VLAN setup First we set up the VLAN, assuming that the access point is already configured with the necessary Management IP address, etc. 1. Log on to the access point using a web browser. 2. Go to SERVICES→VLAN to create the necessary VLANs. In our example, VLAN 21 has been created for eduroam employees and VLAN 40 for management. Remember to tick “Native VLAN” for VLAN 40. 33
Page 1 and 2: Guide to configuring eduroam using
Page 3 and 4: Table of Contents Executive Summary
Page 5 and 6: Executive Summary UFS127 is a UNINE
Page 7 and 8: 1 Network planning 1.1 Necessary co
Page 9 and 10: established by means of the Managem
Page 11 and 12: http://www.cisco.com/en/US/tech/tk7
Page 13 and 14: authentication can be completed. He
Page 15 and 16: Management Interface Netmask: 255.2
Page 17 and 18: 3.2 Further configuration via web b
Page 19 and 20: Path: Security → RADIUS → Accou
Page 21 and 22: Under General, the WLAN can be enab
Page 23 and 24: Security Layer 3 shall be “None
Page 25 and 26: What one selects under QoS depends
Page 27 and 28: 3.2.4 Connecting access points Afte
Page 29 and 30: 3.2.5 Further details Once a access
Page 31: operating and/or the cabling is not
Page 35 and 36: A.3 RADIUS configuration Go to SECU
Page 37 and 38: B. Configuring Microsoft RADIUS ser
Page 39 and 40: Step 3: Adding clients in IAS The c
Page 41 and 42: Step 5: Connection Request Policies
Page 43 and 44: Create a Connection Request Policy
Page 45 and 46: • Click on “OK”, then “Next
Page 47 and 48: User ola.nordmann was granted acces
Page 49 and 50: • Type in a “Friendly Name”
Page 51 and 52: Step 4: Connection Request Policies
Page 53 and 54: Step 5: Network Policies Remote Acc
Page 55 and 56: Step 7: Logging NPS adds log entrie
Page 57 and 58: oot@sirius:~/tmp$ openssl x509 -noo
Page 59 and 60: Glossary CAPWAP Control And Provisi

Guide to configuring eduroam using a Cisco wireless controller Best ...

Create successful ePaper yourself

Delete template?

Save as template?