6-60
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 6 Configuring WLANsWireless Device Access
Configuring WLANs
Figure 6-31 AP Groups > Edit (WLANs) Page
e.
From the WLAN SSID drop-down box, choose the SSID of the WLAN.
f.
From the Interface Name drop-down box, choose the interface to which you want to map the access
point group. Choose the quarantine VLAN if you plan to enable NAC out-of-band support.
g.
To enable NAC out-of-band support for this access point group, check the
NAC State
check box. To
disable NAC out-of-band support, leave the check box unchecked, which is the default value.
h.
Click
Add
to add this WLAN to the access point group. This WLAN appears in the list of WLANs
assigned to this access point group.
Note
If you ever want to remove this WLAN from the access point group, hover your cursor over the
blue drop-down arrow for the WLAN and choose
Remove
.
Step 4
Click
Save Configuration
to save your changes.
Step 5
To see the current state of the client (either Quarantine or Access), follow these steps:
a.
Click
Monitor
>
Clients
to open the Clients page.
b.
Click the MAC address of the desired client to open the Clients > Detail page. The NAC state
appears under the Security Information section.
Note
The client state appears as “Invalid” if the client is probing, has not yet associated to a
WLAN, or cannot complete Layer 2 authentication.
Using the CLI to Configure NAC Out-of-Band Integration
Using the controller CLI, follow these steps to configure NAC out-of-band integration.
Step 1
To configure the quarantine VLAN for a dynamic interface, enter this command:
config interface quarantine vlan
interface_name vlan_id
Note
You must configure a unique quarantine VLAN for each interface on the controller.
