12-8
Cisco Wireless LAN Controller Configuration Guide
OL-9141-03
Chapter 12 Configuring Hybrid REAPWireless Device Access
Configuring Hybrid REAP
e.
Modify the configuration parameters for this WLAN using the settings in
Figure 12-3
as a reference.
In our employee WLAN example, you would need to choose
WPA1+WPA2
from the Layer 2
Security drop-down box and then set the WPA1+WPA2 parameters at the bottom of the page.
Note
Be sure to enable this WLAN by checking the
Admin Status
check box under General
Policies.
Note
If NAC is enabled and you created a quarantined VLAN and want to use it for this WLAN,
make sure to select it from the Interface Name drop-down box under General Policies. Also,
check the
Allow AAA
Override
check box to ensure that the controller checks for a
quarantine VLAN assignment.
f.
Click
Apply
to commit your changes.
g.
Click
Save Configuration
to save your changes.
Step 2
Follow these steps to create a locally switched WLAN. In our example, this is the second WLAN
(employee-local).
a.
Follow the substeps in
Step 1
to create a new WLAN. In our example, this WLAN is named
“employee-local.”
b.
When the WLANs > Edit page appears, modify the configuration parameters for this WLAN using
the settings in
Figure 12-4
as a reference. In our employee WLAN example, you would need to
choose
WPA1+WPA2
from the Layer 2 Security drop-down box and then set the WPA1+WPA2
parameters at the bottom of the page. Make sure to choose PSK authentication key management and
enter a pre-shared key.
Note
Be sure to enable this WLAN by checking the
Admin Status
check box under General
Policies. Also, be sure to enable local switching by checking the
H-REAP Local Switching
check box. When you enable local switching, any hybrid-REAP access point that advertises
this WLAN is able to locally switch data packets (instead of tunneling them to the
controller).
Note
For hybrid-REAP access points, the interface mapping at the controller for WLANs
configured for H-REAP Local Switching is inherited at the access point as the default VLAN
tagging. This can be easily changed per SSID, per hybrid-REAP access point.
Non-hybrid-REAP access points tunnel all traffic back to the controller, and VLAN tagging
is dictated by each WLAN’s interface mapping.
