Guide to configuring eduroam using a Cisco wireless controller Best ...

Figure 1 provides a summary. Each network cloud represents an IP subnet with the exception of the
eduroam hierarchy which for the sake of simplicity is given its own network cloud. The arrows between
the clouds indicate the necessary traffic pattern and form the basis for deciding which ports must be
opened in package filters (if the units are located in different subnets). One must select a configuration
in which, for example, the operating network and services are in the same subnet. In any event it is
recommended that the access points be located in a dedicated subnet, since these network points are
exposed in open premises and risk being tapped. The controller(s) (WLC(s)) should also be separated
from the service or server network, but may for example be located in a general management network
for switches.
8
Figure 1: Proposed subnets and necessary traffic pattern
1.3 The wireless controller (WLC)
The 5500 controller has one administrative IP address (Management), while the 4400 controller
requires two administrative IP addresses (Management and AP Manager). A WiSM module consists of
two 4400 controllers and consequently requires four administrative IP addresses. The Management IP
address is the one which is used for general administration of the controller and is the contact address
to and from other systems such as WCS and RADIUS server. The Management address is also used
for communication with the access points, but here the 4400 controller also has the AP Manager
address which is used in communication with the access points after the initial contact has been