Using The Cli To Configure Wired Guest Access - Cisco 2100 Series Configuration Manual

Chapter 10 Managing User Accounts
To establish the priority in which the servers are contacted to perform web authentication, follow these
Step 27
steps. The default order is local, RADIUS, LDAP.
a.
b.
c.
d.
Click Apply to commit your changes.
Step 28
Click Save Configuration to save your changes.
Step 29
Repeat this process if a second (anchor) controller is being used in the network.
Step 30

Using the CLI to Configure Wired Guest Access

Using the controller CLI, follow these steps to configure wired guest user access on your network.
Step 1 To create a dynamic interface (VLAN) for wired guest user access, enter this command:
config interface create interface_name vlan_id
Step 2 If a link aggregation trunk is not configured, enter this command to map a physical port to the interface:
config interface port interface_name primary_port {secondary_port}
To enable or disable the guest LAN VLAN, enter this command:
Step 3
config interface guest-lan interface_name {enable | disable}
This VLAN is later associated with the ingress interface created in
To create a wired LAN for wired client traffic and associate it to an interface, enter this command:
Step 4
config guest-lan create guest_lan_id interface_name
The guest LAN ID must be a value between 1 and 5 (inclusive).
Note
To configure the wired guest VLAN's ingress interface, which provides a path between the wired guest
Step 5
client and the controller by way of the Layer 2 access switch, enter this command:
config guest-lan ingress-interface guest_lan_id interface_name
To configure an egress interface to transmit wired guest traffic out of the controller, enter this command:
Step 6
config guest-lan interface guest_lan_id interface_name
Note
OL-17037-01
Highlight the server type (local, RADIUS, or LDAP) that you want to be contacted first in the box
next to the Up and Down buttons.
Click the Up and Down buttons until the desired server type is at the top of the box.
Click the < arrow to move the server type to the priority box on the left.
Repeat these steps to assign priority to the other servers.
To delete a wired guest LAN, enter this command: config guest-lan delete guest_lan_id
If the wired guest traffic is terminating on another controller, repeat
terminating (anchor) controller and
controller. Additionally, configure the following command for both controllers:
config mobility group anchor add {guest-lan guest_lan_id | wlan wlan_id} IP_address
Step
Step 1 through Step 5 for the originating (foreign)
Cisco Wireless LAN Controller Configuration Guide
Configuring Wired Guest Access
5.
Step 4 and Step 6 for the
10-29