10-29
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 10 Managing User Accounts
Configuring Wired Guest Access
Step 27
To establish the priority in which the servers are contacted to perform web authentication, follow these
steps. The default order is local, RADIUS, LDAP.
a.
Highlight the server type (local, RADIUS, or LDAP) that you want to be contacted first in the box
next to the Up and Down buttons.
b.
Click the
Up
and
Down
buttons until the desired server type is at the top of the box.
c.
Click the
<
arrow to move the server type to the priority box on the left.
d.
Repeat these steps to assign priority to the other servers.
Step 28
Click
Apply
to commit your changes.
Step 29
Click
Save Configuration
to save your changes.
Step 30
Repeat this process if a second (anchor) controller is being used in the network.
Using the CLI to Configure Wired Guest Access
Using the controller CLI, follow these steps to configure wired guest user access on your network.
Step 1
To create a dynamic interface (VLAN) for wired guest user access, enter this command:
config interface create
interface_name
vlan_id
Step 2
If a link aggregation trunk is not configured, enter this command to map a physical port to the interface:
config interface port
interface_name
primary_port
{
secondary_port
}
Step 3
To enable or disable the guest LAN VLAN, enter this command:
config interface guest-lan
interface_name
{
enable
|
disable
}
This VLAN is later associated with the ingress interface created in
Step 4
To create a wired LAN for wired client traffic and associate it to an interface, enter this command:
config guest-lan create
guest_lan_id
interface_name
The guest LAN ID must be a value between 1 and 5 (inclusive).
Note
To delete a wired guest LAN, enter this command:
config guest-lan delete
guest_lan_id
Step 5
To configure the wired guest VLAN’s ingress interface, which provides a path between the wired guest
client and the controller by way of the Layer 2 access switch, enter this command:
config guest-lan ingress-interface
guest_lan_id
interface_name
Step 6
To configure an egress interface to transmit wired guest traffic out of the controller, enter this command:
config guest-lan interface
guest_lan_id
interface_name
Note
If the wired guest traffic is terminating on another controller, repeat
for the
terminating (anchor) controller and
for the originating (foreign)
controller. Additionally, configure the following command for both controllers:
config mobility group anchor add
{
guest-lan
guest_lan_id
|
wlan
wlan_id
}
IP_address
