WEBVTT 1 00:00.000 --> 00:04.720 All right, time to jump into iOS XE and make sure that we remember how to 2 00:04.720 --> 00:05.960 configure everything. 3 00:05.960 --> 00:09.750 So this lab is going to walk us through setting up an SSID and specifically 4 00:09.750 --> 00:11.280 setting up a WPA 5 00:11.280 --> 00:12.920 2 pre shared key. 6 00:12.920 --> 00:17.500 And then we also need to keep in mind the structure of how iOS XE configuration 7 00:17.500 --> 00:17.960 comes 8 00:17.960 --> 00:18.960 together. 9 00:18.960 --> 00:22.620 And so I've actually got the diagram here that we want to kind of take a look 10 00:22.620 --> 00:22.880 at, make 11 00:22.880 --> 00:25.800 sure we remember this from earlier on in the course. 12 00:25.800 --> 00:31.200 The key points here are that we've got the concept of these three tags here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 12 00:25.800 --> 00:31.200 The key points here are that we've got the concept of these three tags here. 13 00:31.200 --> 00:35.520 We've got the policy tag, we've got the RF tag, we've got the site tag. 14 00:35.520 --> 00:38.360 And all of our configuration comes through the tags. 15 00:38.360 --> 00:42.640 But for the most part, the configuration is set behind the tags, meaning via 16 00:42.640 --> 00:43.720 these profiles. 17 00:43.720 --> 00:49.510 So we've got WLAN profiles, policy profiles, AP join profiles, flex profiles, 18 00:49.510 --> 00:50.600 RF profiles. 19 00:50.600 --> 00:54.000 And that's the structure of how iOS XE comes together. 20 00:54.000 --> 00:59.290 So we want to definitely keep that in mind as we go about trying to configure 21 00:59.290 --> 01:00.040 iOS XE. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 21 00:59.290 --> 01:00.040 iOS XE. 22 01:00.040 --> 01:02.680 So let's go and flip back to our configuration. 23 01:02.680 --> 01:05.960 And we've got a controller set up with its networking already in place. 24 01:05.960 --> 01:07.760 We've got an access point connected. 25 01:07.760 --> 01:09.560 Let's go and go through this challenge. 26 01:09.560 --> 01:11.440 Number one, configure an SSID. 27 01:11.440 --> 01:12.760 That's mostly what we're here to do. 28 01:12.760 --> 01:16.040 So we go to configuration and we can come over to tags and profiles, which is 29 01:16.040 --> 01:16.520 where we 30 01:16.520 --> 01:19.040 spend a lot of our time over here. 31 01:19.040 --> 01:22.440 And then I'm going to click on WLANs down here at the bottom and click add. 32 01:22.440 --> 01:25.040 Our SSIDs are part of a WLAN. 33 01:25.040 --> 01:29.360 And so I'm going to call this as it says, iOS XE underscore lab. 34 01:29.360 --> 01:31.800 It automatically adds that to the SSID field. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 34 01:29.360 --> 01:31.800 It automatically adds that to the SSID field. 35 01:31.800 --> 01:36.320 If I tab over, never forget to enable it as we often say. 36 01:36.320 --> 01:39.120 Now the next lab task says to configure some security. 37 01:39.120 --> 01:40.800 So we're going to go ahead and do that while we're here. 38 01:40.800 --> 01:44.240 We'll come over to the security tab, look at the layer two sub tab. 39 01:44.240 --> 01:46.120 We want to choose WPA2. 40 01:46.120 --> 01:50.040 Now it's enabled on both, but we usually want to go with WPA3 as well. 41 01:50.040 --> 01:53.220 And we'll disable WPA3 policy because there are going to be some requirements 42 01:53.220 --> 01:53.680 there for 43 01:53.680 --> 01:55.040 running both. 44 01:55.040 --> 01:57.080 But either way, we'll scroll down. 45 01:57.080 --> 01:59.720 We'll see that we can check the box for PSK. 46 01:59.720 --> 02:05.240 And I'll enter my super secret, pre shared key of CBT N1234. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 46 01:59.720 --> 02:05.240 And I'll enter my super secret, pre shared key of CBT N1234. 47 02:05.240 --> 02:08.080 And that'll get me the minimum eight characters. 48 02:08.080 --> 02:11.040 So I'm going to apply that to the device. 49 02:11.040 --> 02:13.910 And we're not quite done with lab task one yet though, because it does say that 50 02:13.910 --> 02:14.240 we want 51 02:14.240 --> 02:16.560 to make sure we're mapping it to the native VLAN. 52 02:16.560 --> 02:23.090 Well, we look back at our diagram here and we recall that the VLAN gets mapped 53 02:23.090 --> 02:23.400 here 54 02:23.400 --> 02:25.800 in the policy profile. 55 02:25.800 --> 02:29.730 And so we are going to create a policy profile and then that'll get mapped to 56 02:29.730 --> 02:31.240 the WLAN inside WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 56 02:29.730 --> 02:31.240 the WLAN inside 57 02:31.240 --> 02:33.640 of the policy tag. 58 02:33.640 --> 02:35.400 So let's go ahead and go configure that. 59 02:35.400 --> 02:36.400 Go to configuration. 60 02:36.400 --> 02:40.120 Again, everything that we're talking about is in this tags and profiles section 61 02:40.120 --> 02:40.120 . 62 02:40.120 --> 02:42.400 I'm going to configure a policy profile. 63 02:42.400 --> 02:45.640 Now remember, when it says policy here, it's referring to the profile. 64 02:45.640 --> 02:50.080 All of the tags, including the policy tag, are all in this tags section. 65 02:50.080 --> 02:53.200 So I'm going to go to policy to create a policy profile. 66 02:53.200 --> 02:59.240 We'll click add name, something like lab one, I suppose. 67 02:59.240 --> 03:00.240 Don't forget to enable it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 67 02:59.240 --> 03:00.240 Don't forget to enable it. 68 03:00.240 --> 03:02.160 We always have to enable everything. 69 03:02.160 --> 03:05.920 And the key here is going to access policies and changing our VLAN. 70 03:05.920 --> 03:08.800 So I'm going to select VLAN one for my environment. 71 03:08.800 --> 03:12.120 Now in your lab environment, you're probably going to use a different VLAN ID. 72 03:12.120 --> 03:15.080 Just make sure that it makes sense for your lab space. 73 03:15.080 --> 03:17.480 We're technically told to map it to the native VLAN. 74 03:17.480 --> 03:19.520 And so you're going to want to make sure you pick the right one. 75 03:19.520 --> 03:20.880 So I'm going to say apply. 76 03:20.880 --> 03:24.600 Now I have created my lab one policy profile. 77 03:24.600 --> 03:27.040 Now I need to configure the policy tag. 78 03:27.040 --> 03:28.600 So I come to configuration. 79 03:28.600 --> 03:30.360 Now I look at tags. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 79 03:28.600 --> 03:30.360 Now I look at tags. 80 03:30.360 --> 03:32.560 I start on the policy tag, which is nice. 81 03:32.560 --> 03:34.320 I'm going to click add. 82 03:34.320 --> 03:36.000 We'll call this iOSXCL. 83 03:36.000 --> 03:39.160 Let's just call this lab one again. 84 03:39.160 --> 03:40.160 Keep it simple. 85 03:40.160 --> 03:41.880 I'll click add. 86 03:41.880 --> 03:47.320 And now I can add my WLAN profile, the SSID I created. 87 03:47.320 --> 03:52.160 And I'll match it to lab one policy profile that I just made, which places this 88 03:52.160 --> 03:52.480 SSID 89 03:52.480 --> 03:56.360 onto VLAN one, which is the native VLAN in my environment. 90 03:56.360 --> 03:59.520 So we have just completed tasks one and two. 91 03:59.520 --> 04:02.760 Now task three and four are about these other two tags. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 91 03:59.520 --> 04:02.760 Now task three and four are about these other two tags. 92 04:02.760 --> 04:06.280 So we've got task three asking about AP fallback. 93 04:06.280 --> 04:09.720 That would be part of the join profile, which is part of the site tag. 94 04:09.720 --> 04:13.520 And then number four is about RF, which is on the other side here. 95 04:13.520 --> 04:16.040 So let's go ahead and do task number three. 96 04:16.040 --> 04:19.800 We're going to go to configuration and look for that AP join profile. 97 04:19.800 --> 04:21.800 So let's add a profile. 98 04:21.800 --> 04:24.640 I'm going to call this lab one. 99 04:24.640 --> 04:27.610 And from here, we're going to click over to capwap, which is where the fallback 100 04:27.610 --> 04:28.280 configuration 101 04:28.280 --> 04:29.280 is. 102 04:29.280 --> 04:33.830 Now we're told to disable fallback to make sure probably that we don't trigger WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 102 04:29.280 --> 04:33.830 Now we're told to disable fallback to make sure probably that we don't trigger 103 04:33.830 --> 04:34.480 an outage 104 04:34.480 --> 04:37.840 when it falls back when that primary controller comes back online. 105 04:37.840 --> 04:41.700 We'd really rather control that ourselves and bring it up online and have all 106 04:41.700 --> 04:43.440 the AP fallback, 107 04:43.440 --> 04:45.440 maybe when all the users aren't present. 108 04:45.440 --> 04:47.520 We're also told to disable CDP. 109 04:47.520 --> 04:50.240 Now CDP is going to be under management. 110 04:50.240 --> 04:54.740 CDP interface here as a sub tab, and I can simply disable this and apply it to 111 04:54.740 --> 04:55.720 the device. 112 04:55.720 --> 04:59.240 So now I've created the AP join profile. 113 04:59.240 --> 05:00.680 Let's go ahead and apply it via tag. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 113 04:59.240 --> 05:00.680 Let's go ahead and apply it via tag. 114 05:00.680 --> 05:04.360 So I go to configuration, down to tags. 115 05:04.360 --> 05:05.920 And it's going to be under site tag. 116 05:05.920 --> 05:07.920 And again, we think back to our diagram. 117 05:07.920 --> 05:10.000 So I'm going to add this. 118 05:10.000 --> 05:12.720 We'll just call this site tag one. 119 05:12.720 --> 05:16.560 What do we call their other policy profile or policy tag? 120 05:16.560 --> 05:17.600 I don't remember. 121 05:17.600 --> 05:24.040 So we're going to select the join profile here and look apply. 122 05:24.040 --> 05:25.400 So now we have site tag one. 123 05:25.400 --> 05:26.400 Let's see what we call that. 124 05:26.400 --> 05:27.400 We just called it lab one. 125 05:27.400 --> 05:28.680 Yeah, we shouldn't call it lab one. 126 05:28.680 --> 05:32.080 We should have called it policy lab one or something. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 126 05:28.680 --> 05:32.080 We should have called it policy lab one or something. 127 05:32.080 --> 05:35.560 So now we've got site tag one policy tag one would have been nice. 128 05:35.560 --> 05:37.160 And it is what it is. 129 05:37.160 --> 05:40.480 Okay, so let's go ahead and do the RF portion. 130 05:40.480 --> 05:43.400 So now we need an RF profile. 131 05:43.400 --> 05:46.320 So that would be down here, RF and radio. 132 05:46.320 --> 05:48.080 And so I'm going to click add. 133 05:48.080 --> 05:53.470 And let's go ahead and call this we're disabling channel 48, so we'll call this 134 05:53.470 --> 05:54.440 no 48. 135 05:54.440 --> 05:58.440 And we'll make it a five gigahertz band RF profile. 136 05:58.440 --> 06:00.320 Don't forget to enable it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 136 05:58.440 --> 06:00.320 Don't forget to enable it. 137 06:00.320 --> 06:04.470 And then we'll come over to radio resource management and dynamic channel 138 06:04.470 --> 06:05.360 assignment. 139 06:05.360 --> 06:07.960 And so if you had to poke around to find this option, no worries. 140 06:07.960 --> 06:11.060 Just kind of think through our options here dynamic channel assignments, the 141 06:11.060 --> 06:11.600 one that 142 06:11.600 --> 06:13.040 selects the channel. 143 06:13.040 --> 06:15.640 And so here's where we could disable channel 48. 144 06:15.640 --> 06:18.240 Maybe we've had bad luck with that channel in this area. 145 06:18.240 --> 06:20.920 And so we're just saying, hey, don't don't choose that one. 146 06:20.920 --> 06:24.200 So now we have created that RF profile. 147 06:24.200 --> 06:26.520 And once again, we have to apply it via tag. 148 06:26.520 --> 06:31.000 So come to the tags, come to RF sub tab. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 148 06:26.520 --> 06:31.000 So come to the tags, come to RF sub tab. 149 06:31.000 --> 06:34.080 We'll call this RF tag one. 150 06:34.080 --> 06:38.870 And we're going to for the five gigahertz band, select our no 48 and click 151 06:38.870 --> 06:39.560 apply. 152 06:39.560 --> 06:43.640 So now we've created all of the tags, but we still have to apply them. 153 06:43.640 --> 06:47.240 And so we've got a couple of different ways we can do that. 154 06:47.240 --> 06:51.370 But what we can do is go to configuration, look for the wireless section, go to 155 06:51.370 --> 06:51.880 access 156 06:51.880 --> 06:53.480 points. 157 06:53.480 --> 06:57.360 And then we should see our total AP is being one here. 158 06:57.360 --> 07:01.280 So we'll click the AP and then we can choose our tags up here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 158 06:57.360 --> 07:01.280 So we'll click the AP and then we can choose our tags up here. 159 07:01.280 --> 07:06.590 So select our policy tag and our site tag as well as our RF tag and then click 160 07:06.590 --> 07:07.280 update 161 07:07.280 --> 07:09.480 and apply to device. 162 07:09.480 --> 07:13.760 So this is going to cause the AP to momentarily refresh. 163 07:13.760 --> 07:15.520 And so we'll wait a few moments here. 164 07:15.520 --> 07:18.520 And then we'll test to make sure everything's working when it comes online. 165 07:18.520 --> 07:21.200 All right, the AP is back online. 166 07:21.200 --> 07:25.760 So let's go ahead and make sure that we can connect wirelessly. 167 07:25.760 --> 07:30.920 So I'm going to look on this, find iOS XE lab is being broadcast. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 167 07:25.760 --> 07:30.920 So I'm going to look on this, find iOS XE lab is being broadcast. 168 07:30.920 --> 07:33.120 And we enter in that network security key. 169 07:33.120 --> 07:34.120 Hopefully I remember it. 170 07:34.120 --> 07:36.120 I think it was CBT M1234. 171 07:36.120 --> 07:39.480 We don't need to share anything. 172 07:39.480 --> 07:43.160 And as long as we can connect, at that point we should be good to go. 173 07:43.160 --> 07:47.060 WPA2 pre-shared key is pretty straightforward and it works well for testing in 174 07:47.060 --> 07:48.200 lab environments. 175 07:48.200 --> 07:50.240 And there you go, we are connected. 176 07:50.240 --> 07:52.520 So I'll go ahead and disconnect from that. 177 07:52.520 --> 07:57.560 But either way, as we consider everything that we need to do for iOS XE, so 178 07:57.560 --> 07:58.180 much of 179 07:58.180 --> 08:03.040 it does come down to making sure that we've got this diagram in mind. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 179 07:58.180 --> 08:03.040 it does come down to making sure that we've got this diagram in mind. 180 08:03.040 --> 08:08.400 Again, profiles get mapped to tags, tags get mapped to APs, and they bring all 181 08:08.400 --> 08:08.600 of the 182 08:08.600 --> 08:13.050 configuration with them up to and including the SSID that's getting broadcast 183 08:13.050 --> 08:13.560 as well 184 08:13.560 --> 08:15.480 as the security parameters that manage it.