Cisco WLC

For wireless networks I used to use WLC 4402 controllers, which are no longer supported by Cisco, there is no new software version for them and therefore no new features. These controllers were quite expensive and much of the price was for AP licenses, so I was looking for some way to upgrade or convert (perhaps to a virtual controller). But Cisco doesn't offer anything like that. However, there is currently a promotion where you can buy a bundle of two APs and get a nearly free WLC 2504 with a 25 AP license. So in this article we'll take a look at the WLC 2504 and the design and configuration of the WLC in general, which I haven't covered much before.

We will briefly look at the options for configuring the Microsoft Network Policy Server (NPS), which we will use as a RADIUS server for wireless networks (WLAN). We will describe the possibility to create multiple profiles for different WLANs (SSIDs). We will mention common authentication methods that we will use to verify Active Directory users or computers when logging into WiFi. Including the authentication situation in Windows 11 from version 22H2 (Credential Guard).

About 4 years ago, Cisco completely redesigned its solution for wireless infrastructure. Earlier wireless network controllers (WLCs) were based on Cisco AireOS. The new ones use Cisco IOS XE and are Cisco Catalyst 9800 Series Wireless Controllers. Together with them, new access points (Access Points) Catalyst 9100 Access Points appeared, which are already in the second generation. In this first installment, we'll take a brief look at the modern standards and protocols that new controllers and APs support.

The second part of the series dedicated to the configuration of the Cisco Catalyst 9800 Wireless Controller, which is built on Cisco IOS XE. We will look at the configuration of areas that are not directly related to wireless networks, but are preparation or support for them. It will be about the configuration of the physical WLC, its network interfaces, network services, management interface. General settings for Wi-Fi such as Device Classification and AVC. Authentication options for logging into WLC management and WLAN. And we will briefly describe Web Authentication.

The third part of the description of the IOS XE based Cisco Catalyst 9800 Wireless Controller configuration. We are dedicated to the main area, the configuration of wireless networks (WLAN). A new configuration model is used that uses profiles and tags. Let's describe the principle. Then the interesting/important items from the basic parts, which is WLAN Profile and Policy Profile, tagging options. Finally, examples of configurations from practice.

The last part of the Cisco Catalyst 9800 Wireless Controller IOS XE based configuration description. It deserves to be much more extensive, but only briefly covers certain areas of client operation and monitoring. Small sections of troubleshooting and a few mentions of Windows-side information. At the end is a description of setting up Smart Licensing Using Policy.

We will look at options for performing a Cisco IOS XE software upgrade on Cisco Catalyst 9800 Wireless Controllers. The C9800 supports a variety of update methods that try to minimize network downtime. Another area of ​​software management is the installation of fixes for vulnerabilities and errors, expansion of supported models of access points and firmware updates of HW components.