Cisco Cisco Access Registrar 4.2 Especificaciones descargar pdf (Pagina 221)

100

101

5-37

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 5 Configuring Security Solutions

Validating SSIDs

Note DHCP option 82 is not supported for use with auto-anchor mobility, which is described in Chapter 11.

Use these commands to configure DHCP option 82 on the controller.

1. To configure the format of the DHCP option 82 payload, enter one of these commands:

–

config dhcp opt-82 remote-id ap_mac

This command adds the MAC address of the access point to the DHCP option 82 payload.

–

config dhcp opt-82 remote-id ap_mac:ssid

This command adds the MAC address and SSID of the access point to the DHCP option 82

payload.

2. To enable or disable DHCP option 82 on the controller, enter this command:

config interface dhcp ap-manager opt-82 {enable | disable}

3. To see the status of DHCP option 82 on the controller, enter this command:

show interface detailed ap-manager

Information similar to the following appears:

Interface Name................................... ap-manager

IP Address....................................... 10.30.16.13

IP Netmask....................................... 255.255.248.0

IP Gateway....................................... 10.30.16.1

VLAN............................................. untagged

Active Physical Port............................. LAG (29)

Primary Physical Port............................ LAG (29)

Backup Physical Port............................. Unconfigured

Primary DHCP Server.............................. 10.1.0.10

Secondary DHCP Server............................ Unconfigured

DHCP Option 82................................... Enabled

ACL.............................................. Unconfigured

AP Manager....................................... Yes

Validating SSIDs

You can configure the controller to validate a rogue SSID against the SSIDs configured on the controller.

If a rogue SSID matches one of the controller’s SSIDs, the controller raises an alarm. Follow these steps

to validate SSIDs using the controller GUI.

Note You cannot configure SSID validation from the controller CLI. However, you can use the show wps

summary command to see whether SSID validation has been enabled.

Step 1 Click Security > Wireless Protection Policies > Trusted AP Policies to open the Trusted AP Policies

page.

Step 2 Check the Validate SSID check box to enable SSID validation or uncheck it to disable this feature.

Step 3 Click Apply to commit your changes.

Step 4 Click Save Configuration to save your changes.

1 2 ... 216 217 218 219 220 221 222 223 224 225 226 ... 635 636

Comentarios a estos manuales

Sin comentarios

Cisco Cisco Access Registrar 4.2 Especificaciones Pagina 221

Comentarios a estos manuales