WEBVTT

1
00:00.000 --> 00:04.280
All right, time to jump into arrow s and do pretty much the same thing.

2
00:04.280 --> 00:06.680
We want to make sure we can configure an s s ID.

3
00:06.680 --> 00:11.000
This time we'll do 802 dot one X. And again, in my lab environment, I don't

4
00:11.000 --> 00:11.600
have a radius

5
00:11.600 --> 00:12.600
server.

6
00:12.600 --> 00:14.120
So we'll be able to test connectivity.

7
00:14.120 --> 00:17.670
But the important thing is making sure we know how to go about doing the full

8
00:17.670 --> 00:18.680
configuration.

9
00:18.680 --> 00:20.760
So let's go ahead and follow the tasks.

10
00:20.760 --> 00:24.820
We are to configure an s s ID called arrow s lab.

11
00:24.820 --> 00:26.640
And we're mapping to the native VLAN again.

12
00:26.640 --> 00:30.080
So we've got this WLANs tab up here, we're going to work in.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

12
00:26.640 --> 00:30.080
So we've got this WLANs tab up here, we're going to work in.

13
00:30.080 --> 00:32.880
So we're going to say create new and go.

14
00:32.880 --> 00:34.360
We'll create the profile name.

15
00:34.360 --> 00:38.600
Would we say air OS lab.

16
00:38.600 --> 00:42.200
And then I'll have to type it in again for the s s ID.

17
00:42.200 --> 00:43.200
All right.

18
00:43.200 --> 00:46.080
So now I'm going to make sure I enable it.

19
00:46.080 --> 00:49.480
And remember VLANs are mapped here via the interfaces.

20
00:49.480 --> 00:52.690
So in a production environment, we don't usually want to use the management

21
00:52.690 --> 00:53.360
interface.

22
00:53.360 --> 00:56.600
However, for lab purposes, that is perfectly fine.

23
00:56.600 --> 01:00.870
So when we're told to map this to a particular VLAN, this is how we go about
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

23
00:56.600 --> 01:00.870
So when we're told to map this to a particular VLAN, this is how we go about

24
01:00.870 --> 01:01.600
doing it.

25
01:01.600 --> 01:06.080
So if we need to create our interfaces, we go to controller.

26
01:06.080 --> 01:10.040
And then over here on the left, we have our interfaces and we can create

27
01:10.040 --> 01:11.280
dynamic interfaces

28
01:11.280 --> 01:14.080
via this configuration prop.

29
01:14.080 --> 01:18.840
So let's go back to WLANs and get back into our WLAN we created.

30
01:18.840 --> 01:20.720
Again, we'll enable it here.

31
01:20.720 --> 01:23.400
And then we are needing to configure security.

32
01:23.400 --> 01:26.960
So now remember, this is important for air OS.

33
01:26.960 --> 01:32.000
If we're told to configure 802.1x or WPA enterprise, we don't do it here by
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

33
01:26.960 --> 01:32.000
If we're told to configure 802.1x or WPA enterprise, we don't do it here by

34
01:32.000 --> 01:32.680
selecting

35
01:32.680 --> 01:34.560
802.1x.

36
01:34.560 --> 01:35.760
This is a legacy option.

37
01:35.760 --> 01:41.040
Instead, we're going to leave this at WPA and WPA2 or again, WPA2 and WPA3.

38
01:41.040 --> 01:43.520
Make sure the appropriate policies are enabled.

39
01:43.520 --> 01:47.160
And down here is where we enable 802.1x.

40
01:47.160 --> 01:51.660
Or not done at this point, we have to configure our AAA servers and we just don

41
01:51.660 --> 01:52.400
't have any

42
01:52.400 --> 01:53.400
configured yet.

43
01:53.400 --> 01:55.480
And so we can go ahead and apply.

44
01:55.480 --> 01:58.200
And now we go to the security tab.

45
01:58.200 --> 02:01.320
Remember with iOSXE, you go to the AAA section.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

45
01:58.200 --> 02:01.320
Remember with iOSXE, you go to the AAA section.

46
02:01.320 --> 02:04.000
Here AAA is under security as well.

47
02:04.000 --> 02:08.520
So we're going to go to our radio server authentication and just click new.

48
02:08.520 --> 02:10.840
We're going to add in our server IP address.

49
02:10.840 --> 02:13.680
This is just a dummy address.

50
02:13.680 --> 02:21.200
Secret, CBTN, 1234, confirm that and apply.

51
02:21.200 --> 02:22.880
So now we've got a radio server.

52
02:22.880 --> 02:28.800
I can go back to my WLAN once again, go to my security tab and again, make sure

53
02:28.800 --> 02:30.320
that 802.1x
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
02:28.800 --> 02:30.320
that 802.1x

54
02:30.320 --> 02:31.760
is selected here.

55
02:31.760 --> 02:36.120
Go over to AAA servers and now I can select my server here.

56
02:36.120 --> 02:45.640
So from here, I will click apply and now my WLAN is running WPA2 with 802.1x.

57
02:45.640 --> 02:49.640
So it's nice to verify here on the security policies section.

58
02:49.640 --> 02:54.040
So next we're told to pay attention to our AP groups.

59
02:54.040 --> 02:57.440
So remember, AP groups are kind of hidden in this interface.

60
02:57.440 --> 03:02.200
For whatever reason, they're under advanced on the WLAN tab that we're on.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

60
02:57.440 --> 03:02.200
For whatever reason, they're under advanced on the WLAN tab that we're on.

61
03:02.200 --> 03:04.960
So I expand advanced, click AP groups.

62
03:04.960 --> 03:07.560
All access points and WLANs.

63
03:07.560 --> 03:11.850
So my access point here, my WLAN here, all of them are going to by default go

64
03:11.850 --> 03:12.520
into this

65
03:12.520 --> 03:16.360
default AP group, which is really nice because if I don't really know what's

66
03:16.360 --> 03:17.160
happening under

67
03:17.160 --> 03:21.280
the surface, then all I know is I've got a bunch of APs on my controller.

68
03:21.280 --> 03:26.320
I create a bunch of WLANs and magically they all just go out and into the

69
03:26.320 --> 03:27.600
broadcasting.

70
03:27.600 --> 03:30.800
And that's nice for spinning up an environment.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

70
03:27.600 --> 03:30.800
And that's nice for spinning up an environment.

71
03:30.800 --> 03:35.880
So a whole lot easier just to get an SSID broadcasting in ROS than iOS XE for

72
03:35.880 --> 03:37.400
this purpose.

73
03:37.400 --> 03:41.410
However, it doesn't give us a whole lot of control, especially if we have a lot

74
03:41.410 --> 03:41.840
of different

75
03:41.840 --> 03:44.480
buildings and a lot of different groups of APs.

76
03:44.480 --> 03:46.720
So let's go back to AP groups.

77
03:46.720 --> 03:49.240
We'll say add group in the top right.

78
03:49.240 --> 03:53.720
We'll just call this CBT and lab.

79
03:53.720 --> 03:58.080
Click our group and now we are responsible for selecting which WLANs I'm going

80
03:58.080 --> 03:58.520
to say

81
03:58.520 --> 04:02.040
add new and we'll add arrow s lab.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

81
03:58.520 --> 04:02.040
add new and we'll add arrow s lab.

82
04:02.040 --> 04:05.370
We can't change the interface by the way, which is important potentially on a

83
04:05.370 --> 04:05.840
site by

84
04:05.840 --> 04:08.400
site basis, but we'll just say add here.

85
04:08.400 --> 04:12.530
And then I'm going to go to APs and this is going to knock the access point

86
04:12.530 --> 04:13.280
offline because

87
04:13.280 --> 04:18.320
it has to come back up using all of the new configuration that we just gave it.

88
04:18.320 --> 04:21.120
And so it actually gets us out of the configuration.

89
04:21.120 --> 04:25.120
So we could go actually, let's just go to the wireless tab and we'll wait here

90
04:25.120 --> 04:25.560
for the

91
04:25.560 --> 04:27.520
access point to come online.

92
04:27.520 --> 04:29.560
Okay, the AP is back online.

93
04:29.560 --> 04:33.760
So let's go back to WLANs and make sure it is in the correct AP group.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

93
04:29.560 --> 04:33.760
So let's go back to WLANs and make sure it is in the correct AP group.

94
04:33.760 --> 04:38.270
So we go to the default group now, go to APs see that it's not in the group

95
04:38.270 --> 04:39.320
currently,

96
04:39.320 --> 04:42.200
but I could add it in the same way I just added it to the other group.

97
04:42.200 --> 04:43.200
We don't want to do that.

98
04:43.200 --> 04:46.870
We want to come in here and confirm that it is indeed in the correct group and

99
04:46.870 --> 04:47.280
it is

100
04:47.280 --> 04:50.000
in our CBT and lab group.

101
04:50.000 --> 04:53.640
So AP groups are a big part of how arrow s operates.

102
04:53.640 --> 04:57.320
It's very different from the way we do things in iOS XC with the tags in the

103
04:57.320 --> 04:57.480
profile.

104
04:57.480 --> 05:02.510
But either way, the goal is to take our configuration set and control which
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

104
04:57.480 --> 05:02.510
But either way, the goal is to take our configuration set and control which

105
05:02.510 --> 05:03.600
access points are pushing

106
05:03.600 --> 05:04.760
them out to.

107
05:04.760 --> 05:06.300
And there's just two different ways of doing that.

108
05:06.300 --> 05:09.400
So once we kind of get a feel for the architecture as well as making sure we

109
05:09.400 --> 05:10.440
know how to configure

110
05:10.440 --> 05:15.490
security parameters, then getting our SSID's online and operational is

111
05:15.490 --> 05:16.460
something that will

112
05:16.460 --> 05:21.480
become more and more familiar with this ends our whole section on wireless.

113
05:21.480 --> 05:22.720
It's been quite a journey.

114
05:22.720 --> 05:26.810
We've talked about wireless concepts, security concepts, arrow s configuration,

115
05:26.810 --> 05:27.360
iOS XC

116
05:27.360 --> 05:28.800
configuration.

117
05:28.800 --> 05:33.010
But again, this skill in particular, it would be a really good one to review
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

117
05:28.800 --> 05:33.010
But again, this skill in particular, it would be a really good one to review

118
05:33.010 --> 05:33.680
later on as

119
05:33.680 --> 05:37.750
you're preparing maybe doing your final exam prep just to make sure we can

120
05:37.750 --> 05:38.600
answer some of

121
05:38.600 --> 05:42.210
these quiz questions that we talked about, make sure we remember the concepts,

122
05:42.210 --> 05:42.560
but also

123
05:42.560 --> 05:48.290
be able to get into the arrow s and iOS XC configuration user interfaces and

124
05:48.290 --> 05:49.120
make sure

125
05:49.120 --> 05:51.360
we know how to do these configurations.

126
05:51.360 --> 05:53.960
I hope there's been informative for you and I'd like to thank you for viewing.