Cisco AireOS Controller: How to Configure WLAN Over CLI

Cisco WLC command-line interface can be do a good job if you want to configure something really quickly.

Below is my example on how to configure SSID with basic radio and security (Pre-Shared Key) settings using CLI. Just substitute what is in bold with your own values, copy and paste it to WLC and you are done. Much faster than browsing the GUI looking for boxes to tick.

I have also come up with very basic Python script that just asks you all the parameters needed and then generates all the necessary command lines. Feel free to contact me if you want me to share it.

RF-Profiles with lower datarates disabled

config rf-profile create 802.11b Disable-Lowrate-24GHz-rfp

config rf-profile data-rates 802.11b disabled 1  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b disabled 2  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b disabled 5.5  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b disabled 6  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b disabled 9  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b disabled 11  Disable-Lowrate-24GHz-rfp
config rf-profile data-rates 802.11b mandatory 12  Disable-Lowrate-24GHz-rfp

config rf-profile create 802.11a Disable-Lowrate-5GHz-rfp
config rf-profile data-rates 802.11a disabled 6  Disable-Lowrate-5GHz-rfp
config rf-profile data-rates 802.11a disabled 9  Disable-Lowrate-5GHz-rfp
config rf-profile data-rates 802.11a mandatory 12  Disable-Lowrate-5GHz-rfp

Dynamic interface

config interface create Dynamic-Interface-Name VLAN-ID
config interface address dynamic-interface Dynamic-Interface-Name 10.1.1.16 255.255.255.0 10.1.1.1
config interface dhcp dynamic-interface Dynamic-Interface-Name primary 172.23.1.25 secondary 172.23.1.26

WLAN:

config wlan create WLAN-ID SSID-prf SSID-Name
config wlan interface WLAN-ID SSID-Name
config wlan security wpa wpa2 ciphers aes enable WLAN-ID
config wlan security wpa akm 802.1x disable WLAN-ID
config wlan security wpa akm psk enable WLAN-ID
config wlan security wpa akm psk set-key ascii SecurePreSharedKey WLAN-ID

AP Group:

config wlan apgroup add APGroup-Name
config wlan apgroup description APGroup-Name APGroup-Description

Dynamic interface and APs to AP group mapping

config wlan apgroup interface-mapping add APGroup-Name WLAN-ID Dynamic-Interface-Name

config ap group-name APGroup-Name AP1-Name

config ap group-name APGroup-Name AP2-Name

config ap group-name APGroup-Name AP3-Name

Enabling WLAN

config wlan enable WLAN-ID

Leave a Reply

Your email address will not be published. Required fields are marked *