WEBVTT 1 00:00.000 --> 00:08.100 So recall that the value of a WLAN is that we want to combine our SSID with our 2 00:08.100 --> 00:13.140 SSID configuration including security settings by the way. This is where we 3 00:13.140 --> 00:21.180 would set up our WPA ideally in this world WPA 3 minimum WPA 2 but we would 4 00:21.180 --> 00:25.380 get our security in place here as part of other configurations involving our 5 00:25.380 --> 00:31.580 SSIDs. But then we want to push our WLANs out and so let's say we have three WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 5 00:25.380 --> 00:31.580 SSIDs. But then we want to push our WLANs out and so let's say we have three 6 00:31.580 --> 00:36.240 different sites and these three different sites have a bunch of access 7 00:36.240 --> 00:40.680 points. Chances are these sites are going to have different needs from one 8 00:40.680 --> 00:45.080 another. For example maybe one of these sites is going to have multiple types 9 00:45.080 --> 00:45.200 of 10 00:45.200 --> 00:50.880 employees. Maybe we've got a separation here between our staff as well as maybe 11 00:50.880 --> 00:55.080 faculty. Let's say we're some kind of learning facility and so we've got two 12 00:55.080 --> 00:59.220 different types of internal users here and then over at this site we are going 13 00:59.220 --> 01:06.380 to want to support our staff and our students and then maybe down here in the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 13 00:59.220 --> 01:06.380 to want to support our staff and our students and then maybe down here in the 14 01:06.380 --> 01:12.380 student area we would want to support our students and guests. Allow guests to 15 01:12.380 --> 01:16.620 log in because it's a public space. As we can see we've got three different 16 01:16.620 --> 01:20.140 locations within the organization and yet we have three very different needs. 17 01:20.140 --> 01:26.480 And so how do I go about configuring SSIDs that get mapped out to all of these 18 01:26.480 --> 01:31.400 different access points? Well this is going to involve the creation of AP WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 18 01:26.480 --> 01:31.400 different access points? Well this is going to involve the creation of AP 19 01:31.400 --> 01:31.720 groups. 20 01:31.720 --> 01:38.080 AP groups are only available in AOROS. This isn't something we use with iOSXE. 21 01:38.080 --> 01:45.820 Instead with iOSXE we're going to use the concept of the site tag. Remember the 22 01:45.820 --> 01:50.940 purpose of the site tag is to create a set of configurations and then we 23 01:50.940 --> 01:56.660 apply that to an entire site. So all of these access points will receive this 24 01:56.660 --> 02:01.360 set of configurations and then I can create another site tag and apply it to WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 24 01:56.660 --> 02:01.360 set of configurations and then I can create another site tag and apply it to 25 02:01.360 --> 02:05.660 another site and so on and so forth. Well that's what AP groups are going to do 26 02:05.660 --> 02:10.300 in AOROS. It's going to allow me as the name implies to group a bunch of access 27 02:10.300 --> 02:16.380 points together and then I combined a WLAN to that AP group. Meanwhile on the 28 02:16.380 --> 02:22.380 other side the WLAN is bound remember to an interface. Whether that interface 29 02:22.380 --> 02:22.740 is 30 02:22.740 --> 02:27.340 a dynamic interface or a management interface, usually a dynamic interface, 31 02:27.340 --> 02:31.300 but certainly again as we said it could be the management interface either way, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 31 02:27.340 --> 02:31.300 but certainly again as we said it could be the management interface either way, 32 02:31.300 --> 02:37.780 this is how a VLAN gets mapped to our SSID. So as we can see we're creating a 33 02:37.780 --> 02:44.700 VLAN mapping, SSID and configuration mapping and we're placing that through AP 34 02:44.700 --> 02:50.460 groups onto the access points. So this is exactly how I can get onto my access 35 02:50.460 --> 02:57.480 points here, broadcast that SSID and on the back end place it onto a VLAN. And 36 02:57.480 --> 02:57.700 so 37 02:57.700 --> 03:00.900 thanks to this not only can we apply configurations to a bunch of access WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 37 02:57.700 --> 03:00.900 thanks to this not only can we apply configurations to a bunch of access 38 03:00.900 --> 03:04.820 points at once, but we can also manage different policies at different 39 03:04.820 --> 03:05.700 locations. 40 03:05.700 --> 03:10.180 So let's go ahead and see how we can configure AP groups. The way this is 41 03:10.180 --> 03:13.300 going to happen is we're actually going to go to the WLANs tab, doesn't 42 03:13.300 --> 03:16.300 necessarily feel like this is where it would be and so it's important that we 43 03:16.300 --> 03:19.780 remember that, that it's on the WLANs tab and over on the left we have to 44 03:19.780 --> 03:25.150 extend advanced and click AP groups. We do see that there is a default group, 45 03:25.150 --> 03:25.260 this 46 03:25.260 --> 03:29.020 is important. All access points that connect to this wireless LAN controller 47 03:29.020 --> 03:32.940 will be placed into the default group. We don't necessarily want that because WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 47 03:29.020 --> 03:32.940 will be placed into the default group. We don't necessarily want that because 48 03:32.940 --> 03:37.220 we're going to want at least one AP group per individual site. And so I'm 49 03:37.220 --> 03:43.770 going to click add group over here, we'll call this CBTN group and I'll click 50 03:43.770 --> 03:43.860 add 51 03:43.860 --> 03:49.460 and now we have our group. So I can click on this and see a list of WLANs 52 03:49.460 --> 03:54.540 that's associated with a particular group. As we said in the showed in the 53 03:54.540 --> 03:59.100 example, rather we're probably going to have multiple SSIDs, but also as we've 54 03:59.100 --> 04:02.540 said from a wireless perspective it's considered highly inefficient to have WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 54 03:59.100 --> 04:02.540 said from a wireless perspective it's considered highly inefficient to have 55 04:02.540 --> 04:06.540 more than let's say three SSIDs at a location. We really want to keep it to 56 04:06.540 --> 04:10.740 three, four at the absolute most, but best practices to keep it at three or 57 04:10.740 --> 04:14.780 under to maximize our wireless utilization. So here's where we would apply 58 04:14.780 --> 04:20.500 multiple WLANs. Each WLAN contains that SSID, contains the configuration and by 59 04:20.500 --> 04:26.810 extension it contains the VLAN that that SSID maps to. So long story short, we 60 04:26.810 --> 04:26.900 're 61 04:26.900 --> 04:31.260 going to create AP groups, map access points to the groups which we'll see here WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 61 04:26.900 --> 04:31.260 going to create AP groups, map access points to the groups which we'll see here 62 04:31.260 --> 04:36.260 in a bit and allow us to deploy policy to each individual group, thereby 63 04:36.260 --> 04:36.900 allowing 64 04:36.900 --> 04:40.540 us to scale out our configuration.