Requirements For Wds And Fast Secure Roaming; Configuring The Wmic To Use The Wds Access Point; Configuring The Authentication Server To Support Fast Secure Roaming - Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual

WDS, Fast Secure Roaming, and Radio Management

Requirements for WDS and Fast Secure Roaming

The wireless LAN on which your WMIC resides must meet these requirements:
•
•
•
•
•

Configuring the WMIC to use the WDS Access Point

Your WMIC must be configured as an access point before you can configure it to use WDS. Configure
the WMIC to authenticate through the WDS access point and participate in CCKM.
AP# configure terminal
AP(config)# wlccp ap username APWestWing password 7 wes7win8
AP(config)# end
In this example, the WMIC is enabled to interact with the WDS access point, and it authenticates to your
authentication server using APWestWing as its username and wes7win8 as its password. You must
configure the same username and password pair when you set up the access point as a client on your
authentication server.
Also, to configure an access point to use a WDS access point, the access point must be configured for
an encryption cipher and authentication methods. For example:
encryption mode ciphers ckip-cmic
!
ssid kin_leap
See

Configuring the Authentication Server to Support Fast Secure Roaming

The WDS access point and all access points participating in CCKM must authenticate to your
authentication server. On your server, you must configure usernames and passwords for the access points
and a username and password for the WDS access point.
Follow these steps to configure the access points on your server:
Log into Cisco Secure ACS and click Network Configuration to browse to the Network Configuration
Step 1
page. You must use the Network Configuration page to create an entry for the WDS access point.
Figure 3
Your central wireless domain services (WDS) server is serving a zone (see
Secure Roaming, and Radio Management,"
Root devices are configured to communicate with Central WDS server for the zone
Root devices on subnet / zone boundaries are configured to allow unauthenticated traffic only to
home agent
Modem over IP (MoIP) in foreign agent mode
Cisco-compatible client devices that comply with Cisco Compatible eXtensions (CCX) version 2 or
later
authentication network-eap eap_methods
authentication key-management cckm
"Authentication Types" for more information.
shows the Network Configuration page.
for more information)
Cisco 3200 Series Wireless MIC Software Configuration Guide
Configuring WDS and Fast Secure Roaming
Chapter 14, "WDS, Fast
5