Alright, onward and upward, although maybe we should say it's onward and
backward because
now we're going back to how we did it with ARA-S.
And as I mentioned, iOSXC borrowed a lot of its design principles from ARA-S.
Now it looks a whole lot nicer on iOS and it runs a whole lot nicer, but what
we'll
find is that, again, if we can kind of navigate the iOSXC interface, then we
can definitely
navigate ARA-S because it'll feel similar.
I'm going to come over to WLANs and ARA-S. We're going to create a new WLAN. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I'm going to come over to WLANs and ARA-S. We're going to create a new WLAN.
We'll call this CBT-N-ARA-OS.
This time we have to type it out again.
CBT-N-ARA-OS.
It'll apply.
And we'll enable this.
Remember, we've got to make sure it's tied to the correct interface, basically
replacing
what we did with the adding it to the tag in there.
But either way, we're going to broadcast it, so those are all good.
So I'm going to come over to the Security tab and once again we see these three
sub-tabs.
This is what I mean by it feeling pretty similar. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
This is what I mean by it feeling pretty similar.
So now instead of having all of my WPA options across the top, I'm going to see
this drop-down.
Now none is the same.
It'd be disabling layer two security.
We do see WPA-WPA2 here.
We would see two and three with more modern hardware.
What I want to be very careful of is this option right here.
We might be inclined to think 802.1x in this drop-down is how we configure WPA
Enterprise.
It is not.
If I click this, notice we go right to web configuration. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
If I click this, notice we go right to web configuration.
This 802.1x drop-down is an extremely legacy option.
We don't want to click it unless we, well, yeah, in the modern network we never
want
to click it.
In the same way we'd never want to click static web and web with 802.1x or any
of
these other options, it's always going to be one of these two primary options
up here.
Now if we do want to configure 802.1x with WPA, then I would select my WPA and
WPA2.
Once again, seeing I've got WPA and WPA2 policy, we've got encryption options, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Once again, seeing I've got WPA and WPA2 policy, we've got encryption options,
we have those
in iOSXE as well, and then down here authentication key management.
Well, that should feel familiar.
We had an authentication key management section in iOSXE, and so it's going to
be pretty much
the same thing here.
In fact, we see our fast transition options, we see our PSK option.
So if I want to configure WPA2 pre-shared key, I can check this box for PSK,
come down,
configure my CVTN1234, and that should be good.
So I'm going to click apply. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So I'm going to click apply.
Now if I go back to WLANs, this should automatically, so we see over here, WPA2
, PSK, enabled, it
should automatically actually get applied to the default AP group.
Let's just make sure I come in here.
Look at my WLANs, and there it is.
So I would expect, actually let's just check the AP list.
Yep, our AP is in there.
So I would expect it's already broadcasting.
Let me go ahead and pull that up over here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let me go ahead and pull that up over here.
And we'll take a look at this and see, oh yeah, we've got CVTNROS and iOSXE.
Now, iOSXE isn't working right now because of the fact that we changed it from
PSK to
802.1x.
So I'm just going to click on here, connect automatically.
Oh, what's that key again?
CVTN1234.
What a secure password.
This time I won't share my PC on this highly suspicious network, but hopefully
we'll see
in a moment.
There we go.
We are connected and we are secured. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We are connected and we are secured.
So that was pretty straightforward, mostly because we already have experience
with configuring
Cisco wireless thanks to iOSXE.
So that's all there is to it.
So now if I want to configure 802.1x, we're also going to come to security and
we're going
to have more or less the same situation where now we need to configure AAA
servers.
But this interface is going to look a little bit different.
In fact, if I drop down here, we're going to find I don't have anything any of
my authentication
servers configured yet. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
servers configured yet.
So in order to do that, we're going to first go to security over on AAA, which
is the default
option.
I can look at radius authentication or tack X authentication.
I'm just going to do radius authentication and we're going to click new at the
top here.
From here, I can set a server priority in case I've got multiple servers.
We have that instead of the concept of a radius server group, I'm going to
configure my dummy
IP address of 10.0.0.1 and my shared secret, which I believe we kept CBT on 1, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
IP address of 10.0.0.1 and my shared secret, which I believe we kept CBT on 1,
2, 3, 4,
and the other one as well.
I can change the port number, server status if I want to take it out of
commission, whatever
the situation is.
So all my radius options are here, I'm going to click apply.
So now I have a radius server.
Great.
So let's go back to WLANs.
Go to the security layer two security.
I want to come down here, disable pre shared key, enable 802.1x.
From here, I'm going to go to AAA servers and I'm going to select my server.
So here I'm going to select it by IP and port. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So here I'm going to select it by IP and port.
Notice I didn't get to name it.
It's one nice thing iOS XE does.
It allows me to name my servers.
Instead I'm just going to have to remember which one is which based on IP
address.
So my IP import specified there, if I had multiple other servers, I could list
them here
as well.
And that would be the extent of it.
So I'm going to scroll back up, click apply.
Yes, we know that that's going to be just a very disruptive change.
And now we see over here that we're using 802.1x instead of PSK. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And now we see over here that we're using 802.1x instead of PSK.
So like I've said multiple times, it's very similar to iOS XE or we could say
iOS XE is
very similar to AROS.
But either way, once we kind of get that process down in one, it's really just
a matter of
understanding the nuances in the other, which really especially the differences
we're going
to find are how we configure our radius servers and how we apply them with
groups and that
list in iOS XE versus just mapping out individual radius servers in AROS.
[ movie ]