Summary of Contents for Cisco Catalyst 3650 Series
Page 1
WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) First Published: June 30, 2014 Last Modified: 0, Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
Page 2
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
Accessing the CLI Through a Console Connection or Through Telnet Using the Web Graphical User Interface C H A P T E R 2 Prerequisites for Using the Web GUI WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 4
Configuring General WLAN Properties (CLI) Configuring General WLAN Properties (GUI) Configuring Advanced WLAN Properties (CLI) Configuring Advanced WLAN Properties (GUI) Applying a QoS Policy on a WLAN (GUI) Monitoring WLAN Properties (CLI) WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 6
How to Configure Access Point Groups Creating Access Point Groups Assigning an Access Point to an AP Group Viewing Access Point Group Additional References Feature History and Information for Access Point Groups WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
A vertical line, called a pipe, indicates a choice within a set of keywords or arguments. [x | y] Optional alternative keywords are grouped in brackets and separated by vertical bars. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 8
Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONS WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) viii OL-32353-01...
Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html...
Page 10
Preface Obtaining Documentation and Submitting a Service Request WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Command Modes The Cisco IOS user interface is divided into many different modes. The commands available to you depend on which mode you are currently in. Enter a question mark (?) at the system prompt to obtain a list of commands available for each command mode.
Page 12
Interface While in global Use this mode to Switch(config-if)# configuration configuration configure parameters mode, enter the for the Ethernet interface command ports. (with a specific interface). WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
You can also obtain a list of associated keywords and arguments for any command. SUMMARY STEPS 1. help 2. abbreviated-command-entry ? 3. abbreviated-command-entry <Tab> 4. ? 5. command ? 6. command keyword ? WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
You need to enter only enough characters for the switch to recognize the command as unique. This example shows how to enter the show configuration privileged EXEC command in an abbreviated form: Switch# show conf WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
To recall commands from the history buffer, perform one of the actions listed in this table. These actions are optional. The arrow keys function only on ANSI-compatible terminals such as VT100s. Note WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
EXEC mode. Example: Switch# terminal no history Enabling and Disabling Editing Features Although enhanced editing mode is automatically enabled, you can disable it and reenable it. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Moves the cursor back one word. Moves the cursor forward one word. Esc F Ctrl-T Transposes the character to the left of the cursor with the character located at the cursor. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
To scroll back to the beginning of the command entry, press Ctrl-B or the left arrow key repeatedly. You can also press Ctrl-A to immediately move to the beginning of the line. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
You can search and filter the output for show and more commands. This is useful when you need to sort through large amounts of output or if you want to exclude output that you do not need to see. Using these commands is optional. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
• Connect the switch console port to a management station or dial-up modem, or connect the Ethernet management port to a PC. For information about connecting to the console or Ethernet management port, see the switch hardware installation guide. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 22
After you connect through the console port, through the Ethernet management port, through a Telnet session or through an SSH session, the user EXEC prompt appears on the management station. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
The Configuration Wizard—After initial configuration of the IP address and the local username/password or auth via the authentication server (privilege 15 needed), the wizard provides a method to complete the initial WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 24
• Displays all radio and AP join statistics. • Displays air quality on access points. • Displays list of all Cisco Discovery Protocol (CDP) neighbors on all interfaces and the CDP traffic information. • Displays all rogue access points based on their classification-friendly, malicious, ad hoc, classified, and unclassified.
To enable web mode, which allows users to access the switch GUI using “http://ip-address,” choose Enabled from the HTTP Access drop-down list. Otherwise, choose Disabled. Web mode (HTTP) is not a secure connection. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Password and Confirm Password text boxes. Click Next. The default username is admin and the default password is cisco. You can also create a new administrator user for the switch. You can enter up to 24 ASCII characters for username and password.
Page 27
In the Mobility Configuration page, view and enter the following mobility global configuration settings, and click Next. • Choose Mobility Controller or Mobility Agent from the Mobility Role drop-down list: WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 28
• Choose either Manual or NTP from the Mode drop-down list. On using the NTP server, all access points connected to the switch, synchronizes its time based on the NTP server settings available. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 29
You can save the switch configuration created using the wizard only if a success message is displayed for all the wizards. If the Save Wizard page displays errors, you must recreate the wizard for initial configuration of the switch. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 30
Using the Web Graphical User Interface Configuring the Switch Web GUI WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Feature Information Table at the end of this document. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
• The WLAN name and SSID can have up to 32 characters. Spaces are not allowed in the WLAN profile name and SSID. • You cannot map a WLAN to VLAN0, and you cannot map VLANs 1002 to 1006. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
You can configure WLANs with different SSIDs or with the same SSID. An SSID identifies the specific wireless network that you want the switch to access. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
• Bronze marks all downlink traffic to UP= 1. • Silver marks all downlink traffic to UP= 0. • Gold marks all downlink traffic to UP=4. • Platinum marks all downlink traffic to UP=6. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
The CCX code resident on these clients enables them to communicate wirelessly with Cisco access points and to support Cisco features that other client devices do not, including those features that are related to increased security, enhanced performance, fast roaming, and power management.
We recommend that you enable the diagnostic channel feature only for nonanchored SSIDs that use the Note management interface. CCX Diagnostic feature has been tested only with clients having Cisco ADU card Per-WLAN Radius Source Support By default, the switch sources all RADIUS traffic from the IP address on its management interface, which means that even if a WLAN has specific RADIUS servers configured instead of the global list, the identity used is the management interface IP address.
• For the ssid, enter the Service Set Identifier (SSID) for this WLAN. If the SSID is not specified, the WLAN profile name is set as the SSID. Note By default, the WLAN is disabled. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
SSID Broadcast name of the WLAN. Profile WLAN profile name. Step 4 Click Apply. Related Topics Prerequisites for WLANs, on page 21 Restrictions for WLANs, on page 22 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Select the checkbox corresponding to the WLAN you want to delete. If you delete a WLAN that is part of an AP group, the WLAN is removed from the AP group and from the AP's Note radio. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Profile, type the first few characters of the profile name. You can search a WLAN based on the following criteria: • Profile • ID • SSID WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end Related Topics Prerequisites for WLANs, on page 21 Restrictions for WLANs, on page 22 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Switch# show wlan summary Related Topics Prerequisites for WLANs, on page 21 Restrictions for WLANs, on page 22 Configuring General WLAN Properties (CLI) You can configure the following properties: WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 43
Disables the WLAN before configuring the parameters. Example: Switch# shutdown Step 4 broadcast-ssid Broadcasts the SSID for this WLAN. This field is enabled by default. Example: Switch(config-wlan)# broadcast-ssid WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 44
Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end Related Topics Prerequisites for WLANs, on page 21 Restrictions for WLANs, on page 22 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Radio Policy WLAN radio policy to enable radios on the WLAN. Values are the following: • All • 802.11a only • 802.11g only • 802.11a/g only • 802.11b/g only WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 47
1800 seconds. For all other WLAN security configurations, Switch(config-wlan)# session-timeout the range is 1 to 65535 seconds and the default value is 0 seconds. A value of 0 indicates no session timeout. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 48
0 to 6000. The default is 100. Step 13 Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Click on the WLAN Profile of the WLAN. The WLAN > Edit page is displayed. Step 4 Click on the Advanced Properties tab. Step 5 Configure the Advanced properties. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 50
AAA server. As part of this authentication, the operating system moves clients from the default Cisco WLAN Solution WLAN VLAN to a VLAN returned by the AAA server and predefined in the switches interface configuration.
Page 51
ASCII format. DHCP Option 82 RID Adds the Cisco 2 Byte RID for DHCP option 82. Mode NAC State Enables the NAC on the WLAN. Off Channel Scanning Defer WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 52
Information About the Dynamic Host Configuration Protocol, on page 48 Internal DHCP Servers, on page 49 External DHCP Servers, on page 49 DHCP Assignments, on page 50 Information About DHCP Option 82, on page 51 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
The Existing Policy column displays the current applied policy. To change the existing policy, select the policy from the drop-down list in the Assign Policy column. If a policy is not selected, NONE is displayed. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
• Status show running-config wlan wlan-name Displays the running configuration of a WLAN based on the WLAN name. show running-config wlan Displays the running configuration of all WLANs. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
This table lists the features in this module and provides links to specific configuration information: Feature Release Modification WLAN Functionality Cisco IOS XE 3.3SE This feature was introduced. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Prerequisites for Configuring DHCP for WLANs • To be able to use the DHCP option 82, you must configure DHCP on Cisco IOS software. By default, DHCP option 82 is enabled for all clients. You can control the wireless client behavior using the WLAN suboptions.
Information About DHCP Scopes, on page 52 Restrictions for Configuring DHCP for WLANs • If you override the DHCP server in a WLAN, you must ensure that you configure the underlying Cisco IOS configuration to make sure that the DHCP server is reachable.
Because the switch captures the client IP address that is obtained from a DHCP server, it maintains the same IP address for that client during intra switch, inter switch, and inter-subnet client roaming. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
IP address. These WLANs do not support management over wireless connections. Related Topics Configuring DHCP for WLANs (CLI), on page 52 Configuring Advanced WLAN Properties (GUI), on page 39 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Before You Begin • You must have admin privileges for configuring the WLAN. • To configure the DHCP override, you must have the IP address of the DHCP server. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 63
MAC address. Note If the format option is not configured, only the AP radio MAC address is used. • rid—Adds the Cisco 2 byte RID for DHCP option 82. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 64
Configuring DHCP Scopes, on page 51 Information About DHCP Scopes, on page 52 Prerequisites for Configuring DHCP for WLANs, on page 47 Restrictions for Configuring DHCP for WLANs, on page 48 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end Related Topics Information About DHCP Scopes, on page 52 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Feature Information for DHCP for WLANs Feature Information for DHCP for WLANs Feature Name Release Feature Information DHCP functionality for WLAN Cisco IOS XE 3.3SE This feature was introduced. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 68
Configuring DHCP for WLANs Feature Information for DHCP for WLANs WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Feature Information Table at the end of this document. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
• wep-key-index , wep-key-index1-4—Type of password that follows. A value of 0 indicates that an unencrypted password follows. A value of 8 indicates that an AES encrypted follows. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
104 and 40. 40-bit keys must contain 5 ASCII text characters or 10 hexadecimal characters. 104-bit keys must contain 13 ASCII text characters or 26 hexadecimal characters WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Example: Switch(config)# end Related Topics Prerequisites for Layer 2 Security, on page 59 Configuring 802.1X Layer 2 Security Parameters (CLI) Before You Begin You must have administrator privileges. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 75
Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end Related Topics Prerequisites for Layer 2 Security, on page 59 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Check box to enable or disable WPA policy. WPA Encryption WPA2 encryption type: TKIP or AES. Available only if the WPA policy is enabled. WPA2 Policy. Check box to enable or disable WPA2 policy. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 77
To specify Static WEP, configure the following parameters: Parameter Description 802.11 Data Static WEP encryption type. Encryption Current Key Displays the current selected key details. Type Security type. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 78
This is per WLAN. You can configure all your WLANs (up to 512) as WEP if you want, each with up to 4 keys. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
This table lists the features in this module and provides links to specific configuration information. Feature Name Release Feature Information WLAN Security functionality Cisco IOS XE 3.3SE This feature was introduced. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Feature Information Table at the end of this document. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Additionally, the access point also does not advertise any beacons and probes. Effectively, the no form of the command disables the Wi-Fi direct feature on the WLAN. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Example: Switch# wlan test4 Step 3 Ignores the Wi-Fi Direct status of clients thereby allowing Wi-Fi no wifidirect policy Direct clients to associate. Example: Switch(config)# no wifidirect policy WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Information About the Wi-Fi Direct Client Policy, on page 71 Additional References for Wi-Fi Direct Client Policy Related Documents Related Topic Document Title WLAN Command reference WLAN Command Reference, Cisco IOS XE Release 3SE (Catalyst 3650 Switches) WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Cisco.com user ID and password. Feature Information about Wi-Fi Direct Client Policy Feature Name Release Feature Information Wi-Fi Direct Feature Cisco IOS XE 3.3SE This feature was introduced. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 86
Configuring Wi-Fi Direct Client Policy Feature Information about Wi-Fi Direct Client Policy WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Feature Information Table at the end of this document. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Assigning an Access Point to an AP Group, on page 80 Prerequisites for Configuring AP Groups, on page 77 Restrictions for Configuring Access Point Groups, on page 78 WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Returns to privileged EXEC mode. Alternatively, you can also press Ctrl-Z to exit global configuration mode. Example: Switch(config)# end This example shows how to create an AP group: Switch# configure terminal WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Information About Access Point Groups, on page 78 Viewing Access Point Group Before You Begin You must have administrator privileges to perform this operation. SUMMARY STEPS 1. show ap groups [extended ] WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
All supported MIBs for this release. To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http://www.cisco.com/go/mibs WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
This table lists the features in this modules and provides links to specific configuration information. Feature Name Release Feature Information AP Groups Cisco IOS XE 3.3SE This feature was introduced. WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01...
Page 93
WLAN interface VLAN, Configure WLAN media stream multicast, Configure WLAN radio, Configure WLAN, enable, disable WLANs peer-to-peer blocking session timeout described described Precious Metal Policies configuring using GUI WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) OL-32353-01 IN-1...
Page 94
Index WLAN Configuration Guide, Cisco IOS XE Release 3E (Catalyst 3650 Switches) IN-2 OL-32353-01...