AP Provisioning for Cisco dCloud Content – Unified Mode
This document outlines the steps needed to configure your unified mode AP to operate with Cisco dCloud content. If you are using an AP only without an endpoint kit, you must configure the IP address of your WLC each time you schedule a demonstration, as the public IP address for the wireless LAN controller will change each time.
If you are using an endpoint router, you need only complete this task once.
You should read this document entirely before starting the provisioning process. Your AP must be provisioned before it can be used with Cisco dCloud content.
- Access Point Configuration – 3000, 2000, and 1000 Series
Access Point Configuration – 3000, 2000, and 1000 Series
Equipment List
The following equipment is needed to complete the configuration:
- An Active Cisco dCloud session
- Cisco Aironet Series Access Point with lightweight IOS software (unified)
- Laptop with serial port or USB-to-serial adapter and terminal emulation application
- Ethernet cable
- Console cable (USB to serial adapter may be needed)
- Internet connectivity
Connect to AP
- On Workstation1, ensure your Country is enabled on the demo wireless LAN controller. If the physical country is not in the list, select the country that matches the wireless regulatory domain.
- Connect one end of the console cable to the AP and the other end to the serial port of the laptop.
- Launch the terminal emulation application on the laptop.
- Connect the AP to a power outlet or to a PoE source.
The AP will boot up. You can observe the boot sequence using the terminal emulation application. After the AP has completed booting, you will see a message that the AP is available.
- Press the Enter key. You will be prompted for a username and password.
- Enter the default username and password.
Username: Cisco
Password: Cisco
- Enter privileged EXEC mode.
AP> enable
Password: Cisco
Figure 1. AP Login Screen
Configure WLC IP Address
Locate the IP addresses for the WLC for your active session.
- From the Cisco dCloud UI, go to My Dashboard > My Sessions. Click the View link for your active demonstration.
- Click the Review Session Info link. You will see an incoming addresses table that lists the public and private IP addresses for the wireless LAN controller.
Figure 2. Public and Private IP Addresses for WLC
- Configure the IP address of the wireless LAN controller.
- If you are using an AP without an endpoint router, you will use the public address.
- If you are using an AP with an endpoint router, you will use the private address.
- From the CLI connection to the AP, enter the following command and press Enter.
AP# capwap ap controller ip address <IP_Address>
Figure 3. Configuring the controller IP Address
- Enter the show capwap ip config command to verify that the wireless LAN controller IP address entered correctly.
Figure 4. Verifying IP address was accepted
- Connect one end of an ethernet cable to the port labeled ethernet on the AP and the other end to an active port on your network. This port should have Internet access and should pass the Cisco dCloud Connection Test.
- Verify that the AP has received an IP address on the network via DHCP.
Figure 5. IP Address Verification
The AP will connect to the wireless LAN controller within the demonstration environment.
The AP Status indicator light will remain solid blue or solid green. The AP is now connected to the system.
- You can connect to your monitoring workstation and verify that your AP is operational.
Static IP Assignment
If you are provisioning your AP in a network that requires static IP configuration for devices, you must manually configure the IP address. Contact the system administrator at your location to determine if a static IP address is required.
If a static IP address is required, gather the configuration details, including the IP Address, Subnet Mask and Default-Gateway.
- Configure the IP address, subnet mask and default-gateway using the following commands:
AP# capwap ap ip address <IP_address> <netmask>
AP# capwap ap ip default-gateway <GW_address> - Confirm the configuration:
AP# show capwap ip config
Figure 11. Static IP Config
Please note that this configuration is site-specific and may need to be changed when connecting the AP from a different location.
Troubleshooting
Your AP may fail to join the controller due to a known bug. If your AP is not joining the controller properly, and you see something similar to the below logs on your AP console, follow the steps below to troubleshoot the issue.
*Aug 22 19:39:51.247: %CAPWAP-3-ERRORLOG: Failed to authorize controller using trust config. *Aug 22 19:39:51.248: %CAPWAP-1-SSC_CERT_AUTH_FAILED: Failed to authorize controller, SSC certificate validation failed.Peer certificate verification failed FFFFFFFF *Aug 22 19:39:51.251: %CAPWAP-3-ERRORLOG: Certificate verification failed! *Aug 22 19:39:51.252: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!
- Physically unplug the network cable from the AP.
- Clear any previous configuration stored on the AP.
AP# clear capwap private-config
AP# clear lwapp private-config - Reload the AP.
AP# reload
- Once the AP is reloaded, plug in the network cable.
After your AP has reloaded, it should successfully join the controller.