Cisco 8540 controler configuration

This article describes installation and configuration steps for Cisco 8540 controller. This platform supports the Monitoring Dashboard and the Upgrade audit workflow view with release 8.1 and newer


Configuring Cisco Wireless Controller with your Start Hotspot account - step by step instructions

It is recommended to load all necessary certificates to the controller to have better experience.
You will be redirected to the Monitor Summary page, where you have ability to check Controller details and Access points summary.

Connecting

Access to WLANs section and then from list of available default WLAN`s choose to Edit available or create New.
We choose to edit current.
From General tab it is required to set profile name, SSID and to activate it.
In our example is used StartHotSpotTestAuth and StartHotSpotWiFi.
As Radio Policy select All.
Set Interface/Interface group.
Enable Broadcast SSID.

Cisco setup 1
From Security Layer 2 tab as Layer 2 Security specified None.
Cisco setup 2
From Security Layer 3 tab as Layer 3 Security set Web Policy and activate Authentication.
In WebAuth FlexAcl field set starthotpotflex
Cisco setup 3
From AAA Servers tab as Radius Server Overwrite interface select Enabled and set WLAN from Interface Priority.
Authentication Servers should be Enabled and set IP:23.99.80.107, Port:1812
Accounting Servers should be Enabled and set IP:23.99.80.107, Port:1813
Cisco setup 4
Cisco setup 4
From QoS and Policy-Mapping tab leave default values
Cisco setup 5
Cisco setup 6
Cisco setup 7
From Advanced tab be sure that Allow AAA Override and Coverage Hole Detection are Enabled.
Cisco setup 8
Cisco setup 9
Cisco setup 10
Go to WLANs section and in Ap Groups choose to edit StartHotSpot Group.
From General tab specify AP Group Description StartHotSpot.
Cisco setup 12
From WLANs tab can be seen WLAN ID, SSID, Interface and SNMPC NAC State
Cisco setup 13
From RF Profile tab set none for 802.11a and 802.11b
Cisco setup 14
From Aps tab are visible Aps currently visible in the Group and others which you can add using Add Aps to the Group.
Cisco setup 15
From Wireless menu go to FlexConnect Groups section and choose to Edit.
From General tab is visible Group Name.
Set none as VLAN Template Name.
As HTTP-Proxy set IP address 0.0.0.0 and Port 0
Server type is Primary and port number 1812.
Cisco setup 16
From WLAN VLAN mapping tab select to use VLAN Support, Override LAN on AP and set Native VLAN ID 2100.
As WLAN VLAN Mapping set Id 1.
Cisco setup 17
From Access Control Lists section is available list with names for your flex.
Cisco setup 18
From Security menu go to RADIUS Authentication Servers section.
In Auth Called Station ID Type select AP MAC:SSID:AP Group.
Use AES Key Wrap should be disabled and as MAC delimiter set Hyphen.
Cisco setup 19
Select it in the list and choose to Edit. On the list you will see Server Index and Server address.
Be sure that as Shared Secret format is used ASCII then set and confirm Shared Secret
As Port Number specify 1812
Enable Server Status and Support for CoA
As Server Timeout specify 2 seconds
Enable Network User and Management
From Managemener Retransmit Timeout specify 2 seconds
Cisco setup 20
From Accounting section in Auth Called Station ID Type set AP MAC:SSID:AP Group
For Use AES Key Wrap should be disabled
As MAC delimiter set Hyphen and set for Framed MTU 1300
Cisco setup 21
Select it in the list and choose to Edit.
On the list you will see Server Index and Server address.
Be sure that as Shared Secret format is used ASCII then set and confirm Shared Secret
As Port Number specify 1813
Enable Server Status
As Server Timeout set 2 seconds
Enable Network User
Cisco setup 22
From Web Login Page section set in Web Authentication Type to use External.
As Redirect URL after Login set www.starthotspot.com
As External Webauth URL set http://connect.starthotspot.com/login
Cisco setup 23
FromWeb Authentication Certificate panel are visible currently applied SSL Certtificates.
Cisco setup 24
From Controller menu in General section is visible current configuration.
Cisco setup 25
From Interfaces menu is visible curently configured Interface.
Cisco setup 26
Select it in the list and choose to Edit.
Here will be visible Interface name and MAC address
Internet Address informations and DHCP Information
Cisco setup 27

StartHotSpot parameters for the Cisco solution

Redirect URL after login:http://www.starthotspot.com
External Webauth URL:http://connect.starthotspot.com/login
Authentication RADIUS Server:23.99.80.107
Accounting RADIUS Server:23.99.80.107
Authentication port:1812
Accounting port:1813
Shared Secret: (it will be communicated by StartHotSpot office)


If you need help with configuration, please go to starthotspot.com and contact our tech support. We'll be glad to help you.