Lab Objective
Physically connect a standalone access point to a switch port, perform its initial configuration including SSID and security settings, and verify a wireless client can associate and reach a wired device on the same VLAN.
Lab Purpose
Even in networks using a centralized WLC architecture, engineers must understand standalone access point configuration, since small offices and lab environments frequently rely on a single autonomous AP rather than a full controller-based deployment.
Lab Topology
Switch1 ---- Gi1/0/10 ---- AccessPoint1
Management IP: 192.168.1.20/24
Switch1 ---- Gi1/0/1 ---- WiredPC: 192.168.1.30/24
Both the AP's wired uplink and wireless clients
will use the same VLAN 1 / 192.168.1.0/24 subnetTask 1: Configure the Switch Port for the AP
Configure Gi1/0/10 as an access port in VLAN 1, matching the AP's management subnet.
Task 2: Assign the AP's Management IP
Connect to the AP's initial setup interface and assign it a static management IP address.
Task 3: Configure the SSID
Create an SSID named CorpWiFi.
Task 4: Configure WPA3 Security
Apply WPA3-Personal security to the SSID with a chosen passphrase.
Task 5: Verify Wireless Client Connectivity
Connect a wireless client to the SSID and confirm it receives an IP address and can ping the wired PC.
Solution and Verification
Switch1(config)# interface gigabitethernet1/0/10
Switch1(config-if)# switchport mode access
Switch1(config-if)# switchport access vlan 1-- Initial AP setup (typically via a browser-based
-- setup wizard or a serial console on first boot)
AccessPoint1 Setup:
Management IP: 192.168.1.20
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.1.1AccessPoint1 Wireless Settings:
SSID: CorpWiFi
Broadcast SSID: Enabled
Band: 2.4GHz and 5GHzAccessPoint1 Security Settings:
Security Mode: WPA3-Personal
Passphrase: SecureWifi2026!WirelessClient> Connect to "CorpWiFi"
Enter passphrase: SecureWifi2026!
Status: Connected
IP Address: 192.168.1.35 (via DHCP)
WirelessClient> ping 192.168.1.30
Reply from 192.168.1.30: bytes=32 time=3msKey Takeaway
A standalone access point acts as a Layer 2 bridge between its wireless radio and its wired Ethernet uplink — wireless clients associating to it land on exactly the same VLAN and subnet as the switch port the AP itself connects to, which is why the AP's uplink port configuration and the wireless client's expected subnet must always be planned together.