![Cisco 2100 Series Скачать руководство пользователя страница 395](http://html.mh-extra.com/html/cisco/2100-series/2100-series_configuration-manual_19950395.webp)
7-23
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 7 Controlling Lightweight Access Points
Autonomous Access Points Converted to Lightweight Mode
c.
From the Certificate Type drop-down box, choose
MIC
,
SSC
, or
LSC
.
d.
Click
Add
. The access point appears in the access point authorization list.
Note
To remove an access point from the authorization list, hover your cursor over the blue drop-down
arrow for the access point and choose
Remove
.
Note
To search for a specific access point in the authorization list, enter the MAC address of the access
point in the Search by MAC field and click
Search
.
Using the CLI to Authorize Access Points
Using the controller CLI, follow these steps to authorize access points.
Step 1
To configure an access point authorization policy, enter this command:
config auth-list ap-policy
{
authorize-ap
{
enable
|
disable
} |
authorize-lsc-ap
{
enable
|
disable
}}
Step 2
To configure an access point to accept manufactured-installed certificates (MICs), self-signed
certificates (SSCs), or local significant certificates (LSCs), enter this command:
config auth-list ap-policy
{
mic
|
ssc
|
lsc
{
enable
|
disable
}}
Step 3
To add an access point to the authorization list, enter this command:
config auth-list add
{
mic
|
ssc
|
lsc
}
ap_mac
[
ap_key
]
where
ap_key
is an optional key hash value equal to 20 bytes or 40 digits.
Note
To delete an access point from the authorization list, enter this command:
config auth-list delete
ap_mac
.
Step 4
To view the access point authorization list, enter this command:
show auth-list
Information similar to the following appears:
Authorize MIC APs against AAA ....................... disabled
Authorize LSC APs against Auth-List ................. disabled
Allow APs with MIC - Manufactured Installed C ....... enabled
Allow APs with SSC - Self-Signed Certificate ........ enabled
Allow APs with LSC - Locally Significant Cert ....... enabled
Mac Addr Cert Type Key Hash
----------------------- ---------- ---------------------------------------------
00:12:79:de:65:99
SSC
ca528236137130d37049a5ef3d1983b30ad7e543
00:16:36:91:9a:27
MIC
593f34e7cb151997a28cc7da2a6cac040b329636