Cisco WIRELESS LAN CONTROLLER OL-17037-01 User Manual

Page 22

Advertising
background image

7-22

Cisco Wireless LAN Controller Configuration Guide

OL-17037-01

Chapter 7 Controlling Lightweight Access Points

Autonomous Access Points Converted to Lightweight Mode

Step 6

To add access points to the provision list, enter this command:

config certificate lsc ap-provision auth-list add AP_mac_addr

Note

To remove access points from the provision list, enter this command: config certificate lsc
ap-provision auth-list delete
AP_mac_addr.

Note

If you configure an access point provision list, only the access points in the provision list are
provisioned when you enable AP provisioning (in

Step 8

). If you do not configure an access

point provision list, all access points with a MIC or SSC certificate that join the controller are
LSC provisioned.

Step 7

To configure the number of times that the access point attempts to join the controller using an LSC before
the access point reverts to the default certificate (MIC or SSC), enter this command:

config certificate lsc ap-provision revert-cert retries

where retries is a value from 0 to 255, and the default value is 3.

If you set the number of retries to a non-zero value and the access point fails to join the controller using
an LSC after the configured number of retries, the access point reverts to the default certificate.

If you set the number of retries to 0 and the access point fails to join the controller using an LSC, the
access point does not attempt to join the controller using the default certificate.

Note

If you are configuring LSC for the first time, Cisco recommends that you configure a non-zero
value.

Step 8

To provision the LSC on the access point, enter this command:

config certificate lsc ap-provision {enable | disable}

Step 9

To view the LSC summary, enter this command:

show certificate lsc summary

Information similar to the following appears:

LSC Enabled.......................................... Yes

LSC CA-Server........................................ http://10.0.0.1:8080/caserver

LSC AP-Provisioning.................................. Yes

Provision-List................................... Not Configured

LSC Revert Count in AP reboots................... 3

LSC Params:

Country.......................................... 4

State............................................ ca

City............................................. ss

Orgn............................................. org

Dept............................................. dep

Email............................................ [email protected]

KeySize.......................................... 390

LSC Certs:

CA Cert.......................................... Not Configured

RA Cert....................................... Not Configured

Advertising