Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Steps that should be used to configure WDS

     

     

    Introduction

    Steps that should be used to configure WDS

    Configuration

    I have divided our objective into three parts : [A],[B] and [C]. 

    [A] For the WDS-AP

    1. Mark an AP as the WDS-AP.
    2. Give a Shared-Secret to this WDS-AP, by using which it will authenticate itself to the Local Radius Server, within WDS-AP.
    3. Define the IP Address of the Radius Server for the WDS-AP(in the Server Manager page of WDS-AP)
    4. [This Radius Server is the Local Radius Server , within the WDS-AP]
    5. Set the priority of that Radius Server.
    6. Go to the Local Radius of the WDS-AP, and enter the IP Address of this WDS-AP as the IP Address of a AAA client .

    $$ Mark the WDS-AP also as the INFRA-AP, if you want (from within the WDS-AP).

    7. Create a username for this wds-infra ap(that is within the WDS AP).

    $$ Create a profile for the infra ap'ees' in the WDS ,and set the IP of the Local Radius server(in our case), so that the user name of the WDS-Infra AP be    forwarded , for authentication, to the Local Radius Server.

    8. Put that username in the Local Radius Server.

    [B] For the INFRA-AP

    1. Mark another AP as the INFRA-AP
    2. Give a Shared-Secret to this INFRA-AP,by using which it will authenticate itself to the Local Radius Server,within WDS-AP.
    3. Define the IP Address of the Radius Server for the INFRA-AP(in the Server Manager page of INFRA-AP)
    4. [This Radius Server is the Local Radius Server , within the WDS-AP]
    5. Set the priority of that Radius Server.
    6. Go to the Local Radius of the WDS-AP, and enter the IP Address of this INFRA-AP as the IP Address of another AAA client .
    7. Create a username for this INFRA AP.(that is outside the WDS AP)
    8. Put that username in the Local Radius Server of the WDS AP.

    [C] For the Wireless Clients

    1. A pointer(server group) in the WDS must be created to forward the client authentication requests to the Radius Server.
    2. Go to the individual Infra APs. Fill the Security -> SSID Manager, and Security -> Encryption Manager, page of each INRA-AP.

    ​More Information

    In the WDS setup, the users may be authenticated either via some external radius server or via internal local radius server(within the WDS AP), but the wds and infra aps must be authenticated from the Local Radius Server, within the WDS server.

    Reference

    Cisco Aironet 1100 Series Wireless Domain Services Configuration

    Wireless Domain Services FAQ

    162
    Views
    0
    Helpful
    0
    Comments