Cisco 2100 Series Configuration Manual page 472

Adding Mesh Access Points to the Mesh Network
Table 8-4
Parameter
Force External Authorization
Click Apply to commit your changes.
Step 3
Click Save Configuration to save your changes.
Step 4
Using the CLI to Configure Global Mesh Parameters
Using the controller CLI, follow these steps to configure global mesh parameters.
Refer to the
Note
descriptions, valid ranges, and default values of the parameters used in the CLI commands.
To specify the maximum range (in feet) of all access points in the network, enter this command:
Step 1
config mesh range feet
To see the current range, enter show mesh range.
To enable or disable client association on the primary backhaul (802.11a) of an access point, enter these
Step 2
commands:
config mesh client-access {enable | disable}
config ap wlan {enable | disable} 802.11a Cisco_AP
config ap wlan {add | delete} 802.11a wlan_id Cisco_AP
To enable or disable VLAN transparent, enter this command:
Step 3
config mesh ethernet-bridging vlan-transparent {enable | disable}
Step 4 To define a security mode for the mesh access point, enter one of the following commands:
a.
b.
Cisco Wireless LAN Controller Configuration Guide
8-20
Global Mesh Parameters (continued)
"Using the GUI to Configure Global Mesh Parameters" section on page 8-16
To provide local authentication of the mesh access point by the controller, enter this command:
config mesh security {eap | psk}
To store MAC address filter in an external RADIUS server for authentication instead of the
controller (local), enter these commands:
config macfilter mac-delimiter colon
config mesh security rad-mac-filter enable
config mesh radius-server index enable
Chapter 8 Controlling Mesh Access Points
Description
When enabled along with EAP and External MAC
Filter Authorization parameters, an external
RADIUS server (such as Cisco 4.1 and later)
handles external authorization and authentication
for mesh access points by default. The RADIUS
server overrides local authentication of the MAC
address by the controller which is the default.
Default: Disabled.
for
OL-17037-01