LogoفارسیFA

Hands-On Lab: Installing a Wireless Access Point

This hands-on lab covers physically connecting and performing the initial configuration of a standalone wireless access point, including setting up an SSID, applying WPA3 security, and verifying wireless clients can associate and reach the wired network.

Access Point Initial SetupSSID ConfigurationWPA3 Wireless Security

~2 min read · Updated Sep 22, 2026

Lab Objective

Physically connect a standalone access point to a switch port, perform its initial configuration including SSID and security settings, and verify a wireless client can associate and reach a wired device on the same VLAN.

Lab Purpose

Even in networks using a centralized WLC architecture, engineers must understand standalone access point configuration, since small offices and lab environments frequently rely on a single autonomous AP rather than a full controller-based deployment.

Lab Topology

Switch1 ---- Gi1/0/10 ---- AccessPoint1
                            Management IP: 192.168.1.20/24

Switch1 ---- Gi1/0/1 ---- WiredPC: 192.168.1.30/24

Both the AP's wired uplink and wireless clients
will use the same VLAN 1 / 192.168.1.0/24 subnet

Task 1: Configure the Switch Port for the AP

Configure Gi1/0/10 as an access port in VLAN 1, matching the AP's management subnet.

Task 2: Assign the AP's Management IP

Connect to the AP's initial setup interface and assign it a static management IP address.

Task 3: Configure the SSID

Create an SSID named CorpWiFi.

Task 4: Configure WPA3 Security

Apply WPA3-Personal security to the SSID with a chosen passphrase.

Task 5: Verify Wireless Client Connectivity

Connect a wireless client to the SSID and confirm it receives an IP address and can ping the wired PC.

Solution and Verification

Switch1(config)# interface gigabitethernet1/0/10
Switch1(config-if)# switchport mode access
Switch1(config-if)# switchport access vlan 1

-- Initial AP setup (typically via a browser-based
-- setup wizard or a serial console on first boot)

AccessPoint1 Setup:
  Management IP: 192.168.1.20
  Subnet Mask:   255.255.255.0
  Default Gateway: 192.168.1.1

AccessPoint1 Wireless Settings:
  SSID: CorpWiFi
  Broadcast SSID: Enabled
  Band: 2.4GHz and 5GHz

AccessPoint1 Security Settings:
  Security Mode: WPA3-Personal
  Passphrase: SecureWifi2026!

WirelessClient> Connect to "CorpWiFi"
Enter passphrase: SecureWifi2026!

Status: Connected
IP Address: 192.168.1.35 (via DHCP)

WirelessClient> ping 192.168.1.30

Reply from 192.168.1.30: bytes=32 time=3ms

Key Takeaway

A standalone access point acts as a Layer 2 bridge between its wireless radio and its wired Ethernet uplink — wireless clients associating to it land on exactly the same VLAN and subnet as the switch port the AP itself connects to, which is why the AP's uplink port configuration and the wireless client's expected subnet must always be planned together.

Written & researched by Dr. Shahin Siami

Related Articles

Hands-On Lab: Configuring IPv6 Static Routes

This hands-on lab configures static routes for IPv6 destinations between two routers, mirroring the IPv4 static routing syntax covered earlier in this series while highlighting the IPv6-specific command keyword and address format.

Continue

Hands-On Lab: Configuring Default Static Routes

This hands-on lab configures a default static route on an edge router to reach the internet through an ISP connection, demonstrating how a single route can represent every otherwise-unknown destination rather than requiring individual routes for each one.

Continue

Hands-On Lab: Configuring and Naming Static Routes

This hands-on lab configures static routes with descriptive names attached using the name keyword, improving documentation and making the routing table significantly easier to interpret for anyone reviewing the configuration later.

Continue

Hands-On Lab: Configuring Static Routing via IP Addresses

This hands-on lab configures static routes using a next-hop IP address rather than an outgoing interface, the generally preferred syntax, and compares the resulting routing table entry against the interface-based approach from the previous lab.

Continue

Hands-On Lab: Configuring Static Routing via Interfaces

This hands-on lab configures static routes using an outgoing interface rather than a next-hop IP address, demonstrating this approach's suitability for point-to-point links and its important limitation on multi-access networks.

Continue

Hands-On Lab: Installing a Wireless LAN Controller

This hands-on lab performs the initial setup of a Wireless LAN Controller, joins a lightweight access point to it, and creates a centrally managed WLAN, demonstrating the controller-based architecture that scales far beyond standalone access points.

Continue
Previous ArticleNext Article