Cisco 2100 Series Configuration Manual page 101

Chapter 4 Configuring Controller SettingsWireless Device Access
Enter the IP address of the management interface netmask.
Step 11
Enter the IP address of the default router.
Step 12
Enter the VLAN identifier of the management interface (either a valid VLAN identifier or 0 for an
Step 13
untagged VLAN). The VLAN identifier should be set to match the switch interface configuration.
Enter the network interface (distribution system) physical port number. For the controller, the possible
Step 14
ports are 1 through 4 for a front panel GigE port.
Step 15 Enter the IP address of the default DHCP server that will supply IP addresses to clients, the management
interface, and the service port interface if you use one.
Step 16 Enter the IP address of the access point manager interface.
Step 17 Enter the IP address of the controller's virtual interface. You should enter a fictitious, unassigned IP
address such as 1.1.1.1.
Note
If desired, enter the name of the mobility group/RF group to which you want the controller to belong.
Step 18
Note
Enable or disable symmetric mobility tunneling by entering yes or no. Symmetric mobility tunneling
Step 19
allows inter-subnet mobility to continue when reverse path filtering (RPF) is enabled on a router on any
of the subnets. Refer to
Enter the network name, or service set identifier (SSID). The initial SSID enables basic functionality of
Step 20
the controller and allows access points that have joined the controller to enable their radios.
Enter yes to allow clients to assign their own IP address or no to require clients to request an IP address
Step 21
from a DHCP server.
To configure a RADIUS server now, enter yes and then enter the IP address, communication port, and
Step 22
secret key of the RADIUS server. Otherwise, enter no. If you enter no, the following message appears:
"Warning! The default WLAN security policy requires a RADIUS server. Please see documentation for
more details."
Step 23 Enter the code for the country in which the network is located. Enter help to view the list of available
country codes.
Note
OL-17037-01
The virtual interface is used to support mobility management, DHCP relay, and embedded Layer
3 security such as guest web authentication and VPN termination. All controllers within a
mobility group must be configured with the same virtual interface IP address.
Although the name that you enter here is assigned to both the mobility group and the RF group,
these groups are not identical. Both groups define clusters of controllers, but they have different
purposes. All of the controllers in an RF group are usually also in the same mobility group and
vice versa. However, a mobility group facilitates scalable, system-wide mobility and controller
redundancy while an RF group facilitates scalable, system-wide dynamic RF management. See
Chapter 11 and Chapter 12
Chapter 12
You can enter more than one country code if you want to manage access points in multiple
countries from a single controller. To do so, separate the country codes with a comma (for
example, US,CA,MX). After the configuration wizard runs, you need to assign each access point
joined to the controller to a specific country. See the
page 7-49 for instructions.
for more information.
for more information.
"Configuring Country Codes" section on
Cisco Wireless LAN Controller Configuration Guide
Using the Configuration Wizard
4-5