Specifications
11-12
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-5260-01
Chapter 11 Configuring WDS, Fast Secure Roaming, and Radio Management
Configuring WDS and Fast Secure Roaming
Step 14 Configure the list of servers to be used for 802.1x authentication for CCKM-enabled client devices. You
can specify a separate list for clients using a certain type of authentication, such as EAP, LEAP, or
MAC-based, or specify a list for client devices using any type of authentication. Enter a group name for
the server or servers in the Server Group Name field.
Step 15 Select the primary server from the Priority 1 drop-down menu. (If a server that you need to add to the
group does not appear in the Priority drop-down menus, click Define Servers to browse to the Server
Manager page. Configure the server there, and then return to the WDS Server Groups page.)
Step 16 (Optional) Select backup servers from the Priority 2 and 3 drop-down menus.
Step 17 (Optional) Select Restrict SSIDs to limit use of the server group to client devices using specific SSIDs.
Enter an SSID in the SSID field and click Add. To remove an SSID, highlight it in the SSID list and
click Remove.
Step 18 Click Apply.
Step 19 Configure the WDS access point for LEAP authentication. See Chapter 10, “Configuring Authentication
Types,” for instructions on configuring LEAP.
Note If your WDS access point serves client devices, follow the instructions in the “Configuring Access Points
to use the WDS Device” section on page 11-13 to configure the WDS access point to use the WDS.
CLI Configuration Example
This example shows the CLI commands that are equivalent to the steps listed in the “Configuring Access
Points as Potential WDS Access Points” section on page 11-8:
AP# configure terminal
AP(config)# aaa new-model
AP(config)# wlccp wds priority 200 interface bvi1
AP(config)# wlccp authentication-server infrastructure cckm_infra
AP(config)# wlccp authentication-server client any cckm_roamers
AP(config-wlccp-auth)# ssid fred
AP(config-wlccp-auth)# ssid ginger
AP(config)# end
In this example, infrastructure devices are authenticated using server group cckm_infra; CCKM-enabled
client devices using SSIDs fred or ginger are authenticated using server group cckm_roamers.
For complete descriptions of the commands used in this example, consult the Cisco IOS Command
Reference for Cisco Aironet Access Points and Bridges.