Cisco Cisco Access Registrar 4.2 Especificações descarregar pdf (Página 400)

100

101

8-10

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 8 Managing Controller Software and Configurations

Transferring Files to and from a Controller

Step 6 Enter transfer download start to view the updated settings; then answer y when prompted to confirm

the current settings and start the download process. This example shows the download command output:

Mode........................................... TFTP

Data Type................................... Vendor Dev Cert

TFTP Server IP.............................. 10.10.10.4

TFTP Packet Timeout............................ 6

TFTP Max Retries............................... 10

TFTP Path................................... /tftpboot/username/

TFTP Filename............................... filename.pem

This may take some time.

Are you sure you want to start? (y/N) y

TFTP EAP Dev cert transfer starting.

Certificate installed.

Reboot the switch to use the new certificate.

Step 7 Enter reset system to reboot the controller.

Step 8 After the controller reboots, enter show certificates local-auth to verify that the certificate is installed.

Downloading CA Certificates

Controllers and access points have a Certificate Authority (CA) certificate that is used to sign and

validate device certificates. The controller is shipped with a Cisco-installed CA certificate. This

certificate may be used by EAP-FAST (when not using PACs), EAP-TLS, PEAP-GTC, and

PEAP-MSCHAPv2 to authenticate wireless clients during local EAP authentication. However, if you

wish to use your own vendor-specific CA certificate, it must be downloaded to the controller.

Note See the “Configuring Local EAP” section on page 5-23 for information on configuring local EAP.

Follow the instructions in this section to download CA certificates to the controller through the GUI or

CLI. However, before you begin, make sure you have a TFTP server available for the certificate

download. Keep these guidelines in mind when setting up a TFTP server:

• If you are downloading through the service port, the TFTP server must be on the same subnet as the

service port because the service port is not routable, or you must create static routes on the

controller.

• If you are downloading through the distribution system network port, the TFTP server can be on the

same or a different subnet because the distribution system port is routable.

• A third-party TFTP server cannot run on the same computer as the Cisco WCS because the WCS

built-in TFTP server and the third-party TFTP server require the same communication port.

Note All certificates downloaded to the controller must be in PEM format.

1 2 ... 395 396 397 398 399 400 401 402 403 404 405 ... 635 636

Comentários a estes Manuais

Sem comentários

Cisco Cisco Access Registrar 4.2 Especificações Página 400

Comentários a estes Manuais