Hands-On Lab: Installing a Wireless LAN Controller

This hands-on lab performs the initial setup of a Wireless LAN Controller, joins a lightweight access point to it, and creates a centrally managed WLAN, demonstrating the controller-based architecture that scales far beyond standalone access points.

WLC Initial SetupLightweight Access Point JoinCentralized WLAN Management

~3 دقیقه مطالعه · آخرین به‌روزرسانی ۳۱ شهریور ۱۴۰۵

Lab Objective

Perform the initial setup of a Wireless LAN Controller, confirm a lightweight access point successfully joins it, and create a centrally managed WLAN that the AP then broadcasts automatically.

Lab Purpose

Unlike the standalone access point configured in the previous lab, a lightweight AP has no independent configuration of its own — it receives everything from a central WLC. This lab demonstrates exactly how that relationship forms and how configuration propagates from controller to AP.

Lab Topology

Switch1 ---- Gi1/0/1 ---- WLC1 (management: 192.168.1.5/24)
Switch1 ---- Gi1/0/10 ---- LAP1 (lightweight AP,
                          obtains IP via DHCP)

Both connected to the same management VLAN,
DHCP server already providing addresses on
192.168.1.0/24

Task 1: Perform Initial WLC Setup

Complete the WLC's initial configuration wizard, assigning it the management IP address shown.

Task 2: Verify the Access Point Joins the WLC

Power on LAP1 and confirm it automatically discovers and joins the WLC.

Task 3: Create a Dynamic Interface

On the WLC, create a dynamic interface mapped to VLAN 1 for client traffic.

Task 4: Create a WLAN

Create a WLAN with SSID CorpWiFi-Managed, associating it with the dynamic interface and WPA3 security.

Task 5: Verify the AP Is Broadcasting the WLAN

Confirm the SSID is now broadcast from LAP1, entirely as a result of the centralized WLC configuration.

Solution and Verification

WLC1 Initial Setup Wizard:
  System Name: WLC1
  Management Interface IP: 192.168.1.5
  Subnet Mask: 255.255.255.0
  Default Gateway: 192.168.1.1

-- After powering on LAP1, it uses CAPWAP,
-- discussed earlier in this series regarding
-- wireless architecture, to discover and
-- register with the WLC automatically

WLC1# show ap summary

AP Name          Status       IP Address
LAP1             Registered   192.168.1.40

WLC1 Dynamic Interface:
  Interface Name: client-vlan1
  VLAN ID: 1
  IP Address: 192.168.1.6
  Subnet Mask: 255.255.255.0

WLC1 WLAN Configuration:
  SSID: CorpWiFi-Managed
  Interface: client-vlan1
  Security: WPA3-Personal
  Passphrase: ManagedWifi2026!
  Status: Enabled

WLC1# show wlan summary

WLAN ID  WLAN Name           Status   Interface
1        CorpWiFi-Managed    Enabled  client-vlan1

-- On LAP1, checking nearby available networks
-- confirms CorpWiFi-Managed is now broadcasting,
-- despite no configuration ever being entered
-- directly on LAP1 itself

Key Takeaway

A lightweight AP's entire wireless configuration — SSID, security, VLAN mapping — lives on the WLC, not the AP itself; this is precisely what makes the centralized architecture scale to hundreds of access points, since adding or changing a WLAN happens once on the controller and propagates automatically to every joined AP, rather than requiring individual reconfiguration of each device.

نوشته و پژوهش‌شده توسط دکتر شاهین صیامی

مقالات مرتبط

Hands-On Lab: Final Comprehensive CCNP Troubleshooting Challenge (BGP, DMVPN, and QoS Integration)

This hands-on lab presents a complex multi-layer failure across an integrated BGP-over-DMVPN topology combined with QoS marking, requiring systematic diagnosis of a route reflector misconfiguration, an NHRP registration failure, and an incorrectly applied QoS policy simultaneously affecting the same network.

ادامه

Hands-On Lab: Configuring BGP over DMVPN

This hands-on lab runs iBGP as the routing protocol across the same DMVPN hub-and-spoke topology used in the two previous labs, configuring the hub as a route reflector so spokes learn each other's routes without a full iBGP mesh, combining two previously separate concepts into one integrated design.

ادامه

Hands-On Lab: Configuring OSPF over DMVPN

This hands-on lab runs OSPF as the dynamic routing protocol across the same DMVPN hub-and-spoke topology, configuring the tunnel interface as an OSPF point-to-multipoint network type to correctly handle the hub-and-spoke adjacency pattern without requiring the broadcast network type's DR/BDR election.

ادامه

Hands-On Lab: Configuring EIGRP over DMVPN

This hands-on lab runs EIGRP as the dynamic routing protocol across the DMVPN hub-and-spoke topology built in earlier labs, verifying neighbor relationships form correctly across the multipoint tunnel and routes propagate without requiring per-spoke static configuration on the hub.

ادامه

Hands-On Lab: Configuring HSRP MD5 Authentication

This hands-on lab configures MD5 authentication on an HSRP group, verifying two routers with matching authentication strings form a normal active/standby relationship while a router with a mismatched string is excluded from the group entirely.

ادامه

Hands-On Lab: Configuring Cisco Umbrella-Style DNS Security via DNS Forwarding Redirection

This hands-on lab configures a router to redirect all client DNS queries toward a security-focused DNS resolver using DNS forwarding interception, approximating cloud-delivered DNS security enforcement without requiring per-client configuration changes.

ادامه