CCNA 200-301 - Configure WLAN using WPA2 PSK and AAA using the GUI

hello guys welcome to a another video and in this video we are going to configure WL lane or W lane using wpa2 pre shared key using the GUI so we are going to configure in a wireless Lane em in that wireless Lane or local area network we are going to use a ap or an access point and we are also going to use a W LLC and the w LC it is going it is the one that sends the the commands to the to the ApS because it is a wireless LAN controller so let's go ahead and start with this topology that we are going to be doing first first when I get a computer then I want to get let's say we are going to get a server then we are going to also get a smartphone over here so a wireless smartphone I want to get a router over here then I want to get a the wireless devices the one that we're going to be using for the WOC or the wireless LAN controller that it's going to be this 3504 and actually let me just put it right here next to the server and then I want to get a couple of access points and we are going to be using just a lightweight access point this one right here okay so the first thing that I want to configure oh I forgot to we need you we need a switch to connect all of them together right so my topology is going to look like this there's going to be a wireless access point over here let's go ahead and just name this a just little bit like that that's fine lightweight access point to that that's fine we are going to a couple of IP addresses so I want to place a couple notes this one's going to be 180 - that was H time on the 1/24 let's give it a slice 24 then the controller is going to be a dot 2 and the server is going to be a bat 3 okay looking good so now let's go ahead and plug everything in so first or actually you can use plug in whatever you want it doesn't really matter where you start this one is a gigabit interface so we are going to use a gigabit interface I believe this one also has a gigabit interface so we are going to use another get interface right here the server doesn't it's just a fast internet so we are going to use another fast internet doesn't really matter I'm just making it match just because I'm crazy like that let me go so now what we want to do is we want to configure I want to configure DHCP server over here so we can get IP addresses to all the devices the first one so we are going to put before we do that we want to configure actually an API just over here like I said this one is going to be one or two that one's just H that 1.3 starting airmass / 24 default gateway one I did one into that one H that one the one DNS server we are we don't have one right now we can configure that later if you want to services we are going to get or actually view we can do a DNS server later let's not get that crazy we are going to go over here into the HP we want to turn it on we want to go ahead and create 8 anyone so I so let's kind of remove this code this one kit gives you issues save it we are going to be calling this Wi-Fi IP that's fine Dave okay weights is going to be the router so one and two thousand states that 101 DNS we don't have any we are going to start at 100 - 1 6 8.1 let's start at that one that's 5 because I want to save another IP address and we want to also save the IP address for the router this this wireless LAN controller and also if you want to add another server we can just saved it that for for that reason the WLC address is going to be 180 mm just H that one that - this is so that whenever this lightweight access point get an idea that you know where to communicate like worth to sin were to sin or were to get their configuration so they're going to know that they're going to get that configuration from the wireless LAN controller right so let's coding at it making sure that it is good to go it looks it looks good to me it looks good to you guys yep let's go ahead so we are good with that we can just now close this we are now going to go into this computer we are going to get a DHCP IP address see if we get one there we go we got it d4 gate which subnet mask the first IP address that was available so that is good now we want to go into this wireless controller we want to go into config then we want to go into management and we are going to change this to that to d4 what gateway if you want to we can just configure two one and two that one state that one that one that is also fine so now what we're going to do is since this one has this IP address we are going to connect to it we add a web browser so we are going to go to this computer who just an IP address so they are in the same network we can go to website and it's going to be HTTP so this one we are going to go to this website so we can configure this Wireless LAN controller so first we are going to first we are going to set it up and whenever we after we set it up we are going to create pressure keys we are going to create a a new wireless LAN or a new wireless local area network from this controller and whenever we configure all that then the lightweight access point is going to get its configuration from this Wireless LAN and there we go we are here so we get to this website it is HTTP it's not HTTPS yet so whenever we configure this we are going to have to use HTTPS well for now we are going to be using HTTP so as you can see welcome start by creating an admin account so I'm just going to name this admin this one has a he has a requirements I believe you need to have a list like an upper upper case lower case number and you also need to add a unity a like an asterisk or any of those I'm Kiel I can add sign or something like that so you can see right here if you hover over it tells you that it needs to be at least six characters and included upper case lower case and number and our special characters okay so I'm going to just add this one over here I'm not going to tell you guys so you guys don't hack my network so there you go now we are in step two it took my configuration so for this one the system name we are going to just call it the wireless local area network controller see the date and time is going to state the default they management interface it's going to be the default one 180 mm state that 1.27 a mass - father - father - father 0/24 the default gateway to one I 2008 - 101 we're going to keep all that the same the management VLAN ID is going to be the default point now over here we are going to now create the Wi-Fi the SSID name so this is ID you guys want to call it Wi-Fi now you have the ability to configure wpa2 personal dodo PA - personal only ask for a preacher key wpa2 enterprise it is going to have unique to configure a trip or a server which we are going to be doing that later so but for dodo PA - enterprise you need to configure - PI server which and this wireless LAN controller if it is a if you take a real one it takes either radius or tactics but for packet tracer it only allows you to configure radios which we are going to be doing that later but we are going to use personal which is choice of preacher key and the preacher key we are just going to say Cisco one two three Cisco one two three okay now it needs to be server it's just optional you don't have to do that if you don't want to the management that the Vienna is going through the management you can turn on the gas network if you want to but we are not going to do that we are just going to be configuring just one Wi-Fi or SSID right for the virtual IP address you want to leave this as the default so we are going to leave that as default so that it's good as you can see no guest network and we didn't configure any parameter for optimization so now we should be good let's go ahead and apply so it tells you that the system will the system will reboot after the settings are applied click OK to apply this configuration or click cancel to return to the user wizard we are going to click okay so this one's going to take say that it takes a couple minutes because it is going to reboot the wireless LAN controller so now since the wireless LAN controller has been configured what we could do we are going to just close this and you can see now that it's going to STP so we can go ahead and press this fast-forward time and now it is up and running so now we should be able to access the wireless LAN controller we had a web browser but this time we need to do it using HTTPS so HTTPS one a 2008 that one or two and there we go so now it takes you to the login page it doesn't take you to the setup because we already set it up now we can go to the login and I believe it was a min and password let's see if I remember my password did it take it there you go so now we have login to the wireless LAN controller so it is it looks the same it is identical to a real wireless LAN controller as you can see gives you this it gives you a summary which where we are right now you can see the management IP address you can see the software version right you can see that the name of the system that we named uptime and all that good stuff you can see that I given the temperature it is plus 31 soldiers sources it gives you the CPU individual CPU usage memory usage so it gives you a lot of stuff and if we go to the access point summary you can see that we don't have any access points configure and that's because we haven't configured this lightweight access point yet now because as you can see right now it is power it is off but it gives you a lot of cool stuff everything that is grayed out you're not able to do a configure any of those stuff so you can see GDP is grayed out so there's a lot of stuff that is grayed out but for the CCNA 200 - three or one this this gives you everything that you need okay and if you go to the - to the virtual 202 the wireless lanes you can see that we have configure that one with the Wi-Fi one you can see that the type you can see the ID so if you click on this ID if you give it will give you more information on this profile named Wi-Fi as you can see right now if you go over here it gives you that the status is enable you gotta make sure that its neighbor we're using a management interface security you can see that we are used in developing wpa2 encryption with AES in reuniting TKD IP and if you want to enable authentication via radius you have to configure the 802 that one X and but you need to either do a preacher key or 802 that one X you cannot do both at the same time to PI servers if you want to add one you will have to go into security you have to go into security you add it and then from there it will let you add it so we are going to do that later and like I said it doesn't let you add tax but it does let you do radius authentication so with that being said let's go ahead and plug this light with access point like I said the access point just exponent gets all his other configuration from the wireless LAN controller so if we power this on this is the way they power on you have to plug in the power supply and there we go so let's go ahead and fast forward and now it should be getting its configuration and a little bit let's go in and fast forward again and there we go you got its configuration you can see that the Gateway is 192.168.1.1 which is this right over here and if you hover over it you should see that the Gigabit Ethernet I'm 0 it got an IP address of 180 mm states that 106 which is the next IP address because this one got the one or two that would say once you say that one to five this one got that one to six and if we plug in another one we should we get it when I 2008 that 107 which we are going to be doing later you can see the providing wireless lanes you can see that we got one that is called Wi-Fi so now if we go into the smartphone and we try to connect to this lightweight access point we should be able to do so by going into configuration wireless and over here you need to configure or add the SSID and this idea that we configure with Wi-Fi we all capital and the configuration that we using is wpa2 with a preacher key we need to enter the preacher key I believe it was Cisco one two three so now we should be getting that connection and there we go the smart phone got a connection with the AP so now if we go into let's see if you just hover over it you can see that it got out while at zero it's up and it got a IP address of one and two down state that one at ten and if we try to let's say ping a couple devices issue light shipping this server at let's say ping 102 that wants eight that 103 there we go so you are able to pin this server right here so let's go and configure the router as well so you should be able to pick the default gateway to say no enable don't fix e interface gigabit it's a Gigabit slicer yep IP address 192.168.1.1 and save my configuration now as you can see that it's going to spending through protocol if you fast forward it should be up and running now now we are going to go back into the smart phone and we are going to ping when I - I would say that 101 and we should be able to get a reply from the router so as you can see that smart phone it's working and also if you want to add another if you want to add another access point just for redundancy purposes you can go ahead and add that you can add another one so we are going to add this one to the switch and we are going to turn it on by plugging in the the power supply you can see now that it is us being connected so now we are going to wait for it to get it set up so actually let's see config so yeah that should be good now let's go in just fast forward still doesn't have a nightdress what's going fast over again and there we go it got an IP address or one eye to that one state that 1.11 so now if this access point goes down what's going to happen is this smartphone is going to just connect with this other access point so let's go ahead and try that we are going to remove this link and the phone as you can see has established another connection with the other access point because this almost went down so they have redundancy it's added by adding another lightweight access point and if you go over here we should be able to ping the router still there you go and we should also be able to ping the server as well there we go looking good so now what we are going to be doing is we are going to configure now a we are going to configure triple-a from this server and this server is going to have is going to be we have to turn it on first the client name I believe I named that let's see what I forgot what I named this let's go and go to the computer and we name this let's go ahead and go to the well wireless LAN and we named this what was it let's go ahead and go to manager and the name was todo el a and C go ahead and copy this go ahead and go into the server and here it is IP address of this client is one I 2006 8 that one that to the secret is going to name any we are going to just say Cisco 1 2 3 with a capital C we are going to use the radius because it is unable to use tax right now we are going to add it now we are going to create a username let's go passer 1 2 3 so that's how we are going to authenticate ok so now we are going to configure that from the wireless LAN controller of course we got to go to the GUI and we are going to go to security first so we can add that that radius so we go over here radius dedication service we are going to click on or select new the IP address of our server is when I tell you that wants to 8.1 2 3 the secret is cisco 1 2 3 we confirm it Cisco 1 2 3 the port number we need to use the same phone number that the server is using which is 1645 where it sits there we go 1645 it's going to be enable support for CoA is going to be disabled and we can go ahead and apply and after we apply it what we need to do is now go into the wireless lane and we need to go into that wireless LAN that we have configured and we need to change its out indication to now use triple a and radius so we are going to go into security layer two and now we are going to use in 802 that one X are we going to disable this feature key and we are going to enable 802 that one X Triple A servers we are going to go ahead and add that Triple H Server radio server that we just configure we are going to go ahead and apply it and whenever we apply that the smartphone has lost connection because we were using a preacher key so now we're now using the preacher key we need to now use our trooper authentication and we need to use the username that we configure which was Cisco and the pastor was going to pray so we go ahead and go to this smart phone we are going to go into config Wireless make this bigger as you can see so we're not using this anymore we are using wpa2 Enterprise so we need username and password so Cisco and then one two three and that should eventually get connected with the lightweight access point we are also going to plug this bad boy in so let's give it a couple seconds it should connect and authenticate and if you don't want to wait we can just go ahead and fast forward fast forward again and there we go now we have a connection using that troop or a server with the username Cisco I saw one two three so that is good and if we want to ping to see if we have connectivity we can go ahead and ping the server good and we should be able to ping the Cisco router as well there we go so we have connectivity now what we could do we can go ahead and add another smart device and this smart device is going to have another username account so we are going to you can use the same username account but I just want to create another username account so we are going to go triple-eight we are going to add Cisco one and the same password so you can see that it's actually working so we are going to go to the smartphone configuration wireless we are going to connect to the SSID of Wi-Fi we are going to be using dollar pH to enterprise so let's go one and password one two three so that should out connect with this x1 as you can see right now we have a connectivity so now we should be able to go to desktop command prompt ping 102 that once h/del 101 and we should also be able to ping that 1 2 3 and there we go so it's looking like it is working so we configure a wireless LAN controller we configure ApS to be configured to use just prieser key then we configured to use Trooper a server a radio server so we were able to get all the working and guys if you guys enjoyed this video why don't you guys go ahead and follow me on Twitter and my Twitter account is CCNA directives so if you want to go ahead and follow me on Twitter at CCNA season any 30 tips if you have a Twitter account and if you don't have a Twitter account go ahead and create a Twitter account and then follow me on Twitter thank you guys for watching and I will see you guys on the next one bye bye

Channel: CCNADailyTIPS

Views: 1,891

Keywords: AAA Server, RADIUS Server, RADIUS, CCNA 200-301, 200-301, CCNA, WLAN, WLANC, WLC, Wireless LAN Controller

Id: lDCs4QKTHyY

Length: 25min 50sec (1550 seconds)

Published: Tue Mar 17 2020