Using The Cli To Authorize Access Points - Cisco 2100 Series Configuration Manual

Chapter 7 Controlling Lightweight Access Points
c.
d.
Note
Note

Using the CLI to Authorize Access Points

Using the controller CLI, follow these steps to authorize access points.
To configure an access point authorization policy, enter this command:
Step 1
config auth-list ap-policy {authorize-ap {enable | disable} | authorize-lsc-ap {enable | disable}}
To configure an access point to accept manufactured-installed certificates (MICs), self-signed
Step 2
certificates (SSCs), or local significant certificates (LSCs), enter this command:
config auth-list ap-policy {mic | ssc | lsc {enable | disable}}
To add an access point to the authorization list, enter this command:
Step 3
config auth-list add {mic | ssc | lsc} ap_mac [ap_key]
where ap_key is an optional key hash value equal to 20 bytes or 40 digits.
Note
To view the access point authorization list, enter this command:
Step 4
show auth-list
Information similar to the following appears:
Authorize MIC APs against AAA ....................... disabled
Authorize LSC APs against Auth-List ................. disabled
Allow APs with MIC - Manufactured Installed C ....... enabled
Allow APs with SSC - Self-Signed Certificate ........ enabled
Allow APs with LSC - Locally Significant Cert ....... enabled
Mac Addr
-----------------------
00:12:79:de:65:99
00:16:36:91:9a:27
OL-17037-01
From the Certificate Type drop-down box, choose MIC, SSC, or LSC.
Click Add. The access point appears in the access point authorization list.
To remove an access point from the authorization list, hover your cursor over the blue drop-down
arrow for the access point and choose Remove.
To search for a specific access point in the authorization list, enter the MAC address of the access
point in the Search by MAC field and click Search.
To delete an access point from the authorization list, enter this command:
config auth-list delete ap_mac.
Cert Type
----------
SSC
MIC
Autonomous Access Points Converted to Lightweight Mode
Key Hash
---------------------------------------------
ca528236137130d37049a5ef3d1983b30ad7e543
593f34e7cb151997a28cc7da2a6cac040b329636
Cisco Wireless LAN Controller Configuration Guide
7-23