All right, time to jump into iOS XE and make sure that we remember how to
configure everything.
So this lab is going to walk us through setting up an SSID and specifically
setting up a WPA
2 pre shared key.
And then we also need to keep in mind the structure of how iOS XE configuration
comes
together.
And so I've actually got the diagram here that we want to kind of take a look
at, make
sure we remember this from earlier on in the course.
The key points here are that we've got the concept of these three tags here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
The key points here are that we've got the concept of these three tags here.
We've got the policy tag, we've got the RF tag, we've got the site tag.
And all of our configuration comes through the tags.
But for the most part, the configuration is set behind the tags, meaning via
these profiles.
So we've got WLAN profiles, policy profiles, AP join profiles, flex profiles,
RF profiles.
And that's the structure of how iOS XE comes together.
So we want to definitely keep that in mind as we go about trying to configure
iOS XE. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
iOS XE.
So let's go and flip back to our configuration.
And we've got a controller set up with its networking already in place.
We've got an access point connected.
Let's go and go through this challenge.
Number one, configure an SSID.
That's mostly what we're here to do.
So we go to configuration and we can come over to tags and profiles, which is
where we
spend a lot of our time over here.
And then I'm going to click on WLANs down here at the bottom and click add.
Our SSIDs are part of a WLAN.
And so I'm going to call this as it says, iOS XE underscore lab.
It automatically adds that to the SSID field. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
It automatically adds that to the SSID field.
If I tab over, never forget to enable it as we often say.
Now the next lab task says to configure some security.
So we're going to go ahead and do that while we're here.
We'll come over to the security tab, look at the layer two sub tab.
We want to choose WPA2.
Now it's enabled on both, but we usually want to go with WPA3 as well.
And we'll disable WPA3 policy because there are going to be some requirements
there for
running both.
But either way, we'll scroll down.
We'll see that we can check the box for PSK.
And I'll enter my super secret, pre shared key of CBT N1234. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I'll enter my super secret, pre shared key of CBT N1234.
And that'll get me the minimum eight characters.
So I'm going to apply that to the device.
And we're not quite done with lab task one yet though, because it does say that
we want
to make sure we're mapping it to the native VLAN.
Well, we look back at our diagram here and we recall that the VLAN gets mapped
here
in the policy profile.
And so we are going to create a policy profile and then that'll get mapped to
the WLAN inside WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the WLAN inside
of the policy tag.
So let's go ahead and go configure that.
Go to configuration.
Again, everything that we're talking about is in this tags and profiles section
.
I'm going to configure a policy profile.
Now remember, when it says policy here, it's referring to the profile.
All of the tags, including the policy tag, are all in this tags section.
So I'm going to go to policy to create a policy profile.
We'll click add name, something like lab one, I suppose.
Don't forget to enable it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Don't forget to enable it.
We always have to enable everything.
And the key here is going to access policies and changing our VLAN.
So I'm going to select VLAN one for my environment.
Now in your lab environment, you're probably going to use a different VLAN ID.
Just make sure that it makes sense for your lab space.
We're technically told to map it to the native VLAN.
And so you're going to want to make sure you pick the right one.
So I'm going to say apply.
Now I have created my lab one policy profile.
Now I need to configure the policy tag.
So I come to configuration.
Now I look at tags. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now I look at tags.
I start on the policy tag, which is nice.
I'm going to click add.
We'll call this iOSXCL.
Let's just call this lab one again.
Keep it simple.
I'll click add.
And now I can add my WLAN profile, the SSID I created.
And I'll match it to lab one policy profile that I just made, which places this
SSID
onto VLAN one, which is the native VLAN in my environment.
So we have just completed tasks one and two.
Now task three and four are about these other two tags. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now task three and four are about these other two tags.
So we've got task three asking about AP fallback.
That would be part of the join profile, which is part of the site tag.
And then number four is about RF, which is on the other side here.
So let's go ahead and do task number three.
We're going to go to configuration and look for that AP join profile.
So let's add a profile.
I'm going to call this lab one.
And from here, we're going to click over to capwap, which is where the fallback
configuration
is.
Now we're told to disable fallback to make sure probably that we don't trigger WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now we're told to disable fallback to make sure probably that we don't trigger
an outage
when it falls back when that primary controller comes back online.
We'd really rather control that ourselves and bring it up online and have all
the AP fallback,
maybe when all the users aren't present.
We're also told to disable CDP.
Now CDP is going to be under management.
CDP interface here as a sub tab, and I can simply disable this and apply it to
the device.
So now I've created the AP join profile.
Let's go ahead and apply it via tag. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's go ahead and apply it via tag.
So I go to configuration, down to tags.
And it's going to be under site tag.
And again, we think back to our diagram.
So I'm going to add this.
We'll just call this site tag one.
What do we call their other policy profile or policy tag?
I don't remember.
So we're going to select the join profile here and look apply.
So now we have site tag one.
Let's see what we call that.
We just called it lab one.
Yeah, we shouldn't call it lab one.
We should have called it policy lab one or something. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We should have called it policy lab one or something.
So now we've got site tag one policy tag one would have been nice.
And it is what it is.
Okay, so let's go ahead and do the RF portion.
So now we need an RF profile.
So that would be down here, RF and radio.
And so I'm going to click add.
And let's go ahead and call this we're disabling channel 48, so we'll call this
no 48.
And we'll make it a five gigahertz band RF profile.
Don't forget to enable it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Don't forget to enable it.
And then we'll come over to radio resource management and dynamic channel
assignment.
And so if you had to poke around to find this option, no worries.
Just kind of think through our options here dynamic channel assignments, the
one that
selects the channel.
And so here's where we could disable channel 48.
Maybe we've had bad luck with that channel in this area.
And so we're just saying, hey, don't don't choose that one.
So now we have created that RF profile.
And once again, we have to apply it via tag.
So come to the tags, come to RF sub tab. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So come to the tags, come to RF sub tab.
We'll call this RF tag one.
And we're going to for the five gigahertz band, select our no 48 and click
apply.
So now we've created all of the tags, but we still have to apply them.
And so we've got a couple of different ways we can do that.
But what we can do is go to configuration, look for the wireless section, go to
access
points.
And then we should see our total AP is being one here.
So we'll click the AP and then we can choose our tags up here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll click the AP and then we can choose our tags up here.
So select our policy tag and our site tag as well as our RF tag and then click
update
and apply to device.
So this is going to cause the AP to momentarily refresh.
And so we'll wait a few moments here.
And then we'll test to make sure everything's working when it comes online.
All right, the AP is back online.
So let's go ahead and make sure that we can connect wirelessly.
So I'm going to look on this, find iOS XE lab is being broadcast. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So I'm going to look on this, find iOS XE lab is being broadcast.
And we enter in that network security key.
Hopefully I remember it.
I think it was CBT M1234.
We don't need to share anything.
And as long as we can connect, at that point we should be good to go.
WPA2 pre-shared key is pretty straightforward and it works well for testing in
lab environments.
And there you go, we are connected.
So I'll go ahead and disconnect from that.
But either way, as we consider everything that we need to do for iOS XE, so
much of
it does come down to making sure that we've got this diagram in mind. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
it does come down to making sure that we've got this diagram in mind.
Again, profiles get mapped to tags, tags get mapped to APs, and they bring all
of the
configuration with them up to and including the SSID that's getting broadcast
as well
as the security parameters that manage it.