User guide

6-19

Cisco WLAN Controller Web Interface User Guide

OL-7416-04

Chapter 6 Security Menu Bar Selection

AP Policies

Use SECURITY > AAA > AP Policies to navigate to this page.

This page allows you to set policies that help in the authorization of access points. Access points are

authorized against AAA and/or a certificate.

The following tables describe the access point authorization parameters.

Adding an AP to Authorization List

To add an access point to the authorization list of a Cisco 4100 Series Wireless LAN Controller, perform

these steps:

Step 1 In the MAC Address field, enter the MAC address of the AP.

Step 2 From the Certificate Type drop-down list, select MIC.

Step 3 Click Add.

To add an AP to the authorization list of a Cisco 2000 Series Wireless LAN Controller or Cisco 4400

Series Wireless LAN Controller:

Step 1 In the MAC Address field, enter the MAC address of the AP.

Step 2 From the Certificate Type drop-down list, select either MIC or SSC.

Note Select MIC as the certificate type if you want to add Cisco Aironet 1000 Series lightweight

access points to the authorization list. For other Cisco access points, select SSC as the certificate

type.

Step 3 Enter the SHA1 Key Hash.

Note SHA1 Key Hash option is displayed only if you have selected SSC as the certificate type in the

previous step.

Table 6-1 Policy Configuration

Parameter Description

Authorize APs against AAA Check this check box if you want the access

points to be authorized against AAA.

Accept Self Signed Certificate (SSC) Check this check box if you want the access

points to be authorized against a certificate.

Note SSC option is available only in Cisco

4400 Series Wireless LAN Controllers

and Cisco 2000 Series Wireless LAN

Controllers.