Implementing Cisco Unified Wireless Voice Networks Course Management Overview The Implementing Cisco Unified Wireless Voice Networks version 1.0 (IUWVN v1.0) course is a five-day instructor-led

IUWVN

Implementing Cisco Unified Wireless Voice Networks

Course Administration Guide

Version 1.0

Refer to Student Guide

Text Part Number: xx-xxxx-xx

Course Administration Guide © 2009 Cisco Systems, Inc. All Rights Reserved.

DISCLAIMER WARRANTY: THIS CONTENT IS BEING PROVIDED “AS IS.” CISCO MAKES AND YOU RECEIVE NO WARRANTIES IN CONNECTION WITH THE CONTENT PROVIDED HEREUNDER, EXPRESS, IMPLIED, STATUTORY OR IN ANY OTHER PROVISION OF THIS CONTENT OR COMMUNICATION BETWEEN CISCO AND YOU. CISCO SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE. This learning product may contain early release content, and while Cisco believes it to be accurate, it falls subject to the disclaimer above.

IUWVN

Course Management

Overview The Implementing Cisco Unified Wireless Voice Networks version 1.0 (IUWVN v1.0) course is a five-day instructor-led training (ILT) course designed to help learners prepare for the Cisco CCNP® wireless certification, a professional-level certification specializing in the wireless field. The IUWVN course is a component of the proposed CCNP wireless curriculum. The IUWVN course is designed to give learners a firm understanding of how to integrate voice over wireless LAN (VoWLAN) services into the wireless LAN (WLAN) and be able to implement VoWLAN, quality of service (QoS), and high-bandwidth applications into the wireless network. The IUWVN training class reinforces the instruction by providing learners with hands-on labs.

Outline The Course Management section of the Course Administration Guide includes these topics:

� Overview

� Course Instruction Details

� Course Evaluations

� Equipment List

� Course Delta Information

Course Version This is the original release of the course named Implementing Cisco Unified Wireless Voice Networks version 1.0 (IUWVN v1.0).

Course Objectives Upon completing this course, the learner will be able to meet these overall objectives:

� Implement QoS for wireless applications using the best-practices guidelines

� Describe evolution of voice from traditional through VoIP architecture and finally into VoWLAN.

� Implement a VoWLAN network infrastructure

2 Implementing Cisco Wireless Voice Networks (IUWVN) v1.0. © 2009 Cisco Systems, Inc.

� Implement multicast in a wireless network

� Configure the wireless infrastructure for video and high-bandwidth applications

Target Audience The primary audience for this course is as follows:

� Network engineers

� Network administrators

� Network managers

� Systems engineers

The primary audience is formed of individuals involved in the technical handling of Cisco platforms and solutions, namely installing, configuring, operating, and troubleshooting. This is a somewhat arbitrary decision to cover only theses areas because many people with Cisco certifications are called on to provide advice in network planning and design as well. In this report, the target audience will be referred to generically as “technicians.”

The secondary audience for this course is as follows:

� Network designers

� Project managers

Learner Skills and Knowledge The knowledge and skills that a learner must have before attending this course are as follows:

� Interconnecting Cisco Networking Devices Part 1 (ICND1)

� Interconnecting Cisco Networking Devices Part 2 (ICND2)

� Implementing Cisco Unified Wireless Networking Essentials (IUWNE)

It is also recommended that learners considered for this training have a basic knowledge of the following:

� Cisco Lifecycle Services

� Wireless standards (IEEE)

� Wireless regulator environment (FCC, ETSI, and so on)

� Wireless certification organization (Wi-Fi Alliance)

Learners considered for this training will have demonstrated competencies (knowledge, skills, and attitudes) equivalent to the following:

� Basic computer literacy, including the use of general office software such as Microsoft Word and Microsoft Excel

� Basic Windows navigation and keyboard literacy skills

� Basic Internet usage skills

� Basic email usage skills

© 2009 Cisco Systems, Inc. Course Administration Guide 3

Course Instruction Details This topic provides the information that you need to prepare the course materials and set up the classroom environment.

Instructor Requirements To teach this course, instructors must have attended the following training or completed the following requirements:

� Be an active Cisco Certified Systems Instructor in good standing

� Attend a Train the Trainer (TTT) or attend the IUWVN v1.0 course as a learner in a class facilitated by a qualified Cisco Certified Systems Instructor

� Pass an Implementing Cisco Unified Wireless Voice Networks exam #642-741 at the Instructor pass score

Note Submit questions concerning instructor certification to [email protected].

Classroom Reference Materials These items should be available for the learner during the course:

� Student Guide

� Lab Guide

� Course Evaluation Form

Class Environment This information describes recommended class size and classroom setup:

� Room set up classroom style with chairs and tables large enough for 16 learners

� Eight pairs of chairs sharing access to eight laptops

� Projector to display course PowerPoint slides and projection screen as needed

� Sufficient power for all equipment

� For local labs, rack and floor space to locate all equipment


Course Flow This is the suggested course schedule. You may make adjustments based on the skills, knowledge, and preferences of the learners in attendance. The presentation of all topics is optional for noncertification offerings, but you are encouraged to use them because they are designed to reinforce the lesson concepts and ensure that learners apply some of the concepts.

Day 1: Course Introduction, Identifying General Considerations for Wired and Wireless QoS, Describing Wireless QoS Deployment Schemes, Configuring the Controller and Cisco WCS for QoS, Configuring the Wired Infrastructure for QoS.

8:00–8:30 (0800–0830)

Course Introduction

8:30–10:20 (0830–1020)

Identifying General Considerations for Wired and Wireless QoS

10:20–10:30 (1020–1030)

Break

10:30–11:30 (1030–1130)

Identifying General Considerations for Wired and Wireless QoS (Cont.)

11:30–12:00 (1130–1200)

Describing Wireless QoS Deployment Schemes

12:00–1:00 (1200–1300)

Lunch

1:00–1:45 (1300–1345)

Configuring the Controller and Cisco WCS for QoS

1:45–3:00 (1345–1500)

Lab 1-1

3:00–3:15 (1500–1515)

Break

3:15-5:00 (1515-1700)

Configuring the Wired Infrastructure for QoS

5:00 (1700) Day ends

Day 2: Configuring the Wired Infrastructure for QoS (Cont.), Understanding Current Best Practice Guidelines, Describing the evolution of Voice Architecture, Describing VoWLAN Call Flow, Designing Wireless for Voice.

8:00–8:30 (0800–0830)

Review of Day 1

8:30–9:00 (0830–0900)

Configuring the Wired Infrastructure for QoS (Cont.)

9:00–9:30 (0900–0930)

Lab 1-2

9:30-10:15 (0930-1015)

Understanding Current Best-Practice Guidelines

10:15-10:30 (1015-1030)

Break

10:30-11:30 (1030-1130)

Lab 1-3

11:30-12:00 (1130-1200)

Describing the Evolution of Voice Architecture


12:00–1:00 (1200–1300)

Lunch

1:00–1:50 (1300–1350)

Describing the Evolution of Voice Architecture (Cont.)

1:50–3:00 (1350–1500)

Describing VoWLAN Call Flow

3:00-3:10 (1500-1510)

Break

3:10–5:00 (1510–1700)

Designing Wireless for Voice

5:00 (1700) Day ends

Day 3: Designing Wireless for Voice, Verifying Voice Readiness, Describing Hardware and Software Requirements for VoIP, Configuring a WLAN for Voice, Configuring Infrastructure Devices for End-to-End Voice over Wireless, Configuring Wireless Client Devices.

8:00–8:30 (0800–0830)

Review of Day 2

8:30–9:20 (0830–0920)

Designing Wireless for Voice (Cont.)

9:20-9:30 (0920-0930)

Break

9:30-10:15 (0930-1015)

Verifying Voice Readiness

10:15–12:00 (1015–1200)

Lab 2-1

12:00–1:00 (1200–1300)

Lunch

1:00–1:30 (1300–1330)

Describing Hardware and Software Requirements for VoIP

1:30–2:50 (1330–1450)

Configuring a WLAN for Voice

2:50-3:00 (1450-1500)

Break

3:00-4:00 (1500-1600)

Configuring Infrastructure Devices for End-to-End Voice over Wireless

4:00–5:00 (1600–1700)

Configuring Wireless Client Devices

5:00 (1700) Day ends

Day 4: Troubleshooting VoWLAN, Understanding General Multicast Concepts, Describing Implications for Multicast in 802.11, Configuring Multicast in a Wireless Network.

8:00–8:30 (0800–0830)

Review of Day 3

8:30–9:30 (0830–0930)

Lab 3-1

9:30-9:40 (0930-0940)

Break

9:40-10:00 (0940-1000)

Lab 3-2


10:00–11:00 (1000–1100)

Lab 3-3

11:00–12:00 (1100–1200)

Troubleshooting VoWLAN

12:00–1:00 (1200–1300)

Lunch

1:00–2:00 (1300–1400)

Lab 3-4

2:00–2:50 (1400–1450)

Understanding General Multicast Concepts

2:50–3:00 (1450–1500)

Break

3:00-4:15 (15000-1615)

Describing Implications for Multicast in 802.11

4:15–5:00 (1615–1700)

Configuring Multicast in a Wireless Network

5:00 (1700) Day ends

Day 5: Troubleshooting Multicast in a Wireless Network, Implementing QoS for Latency-Sensitive Applications, Determining Bandwidth Requirements and Preparing the Controller for Video, Describing Benefits of 802.11n for Video

8:00–8:30 (0800–0830)

Review of Day 4

8:30–9:20 (0830–0920)

Troubleshooting Multicast in a Wireless Network

9:20-9:30 (0920-0930)

Break

9:30–10:20 (0930–1020)

Lab 4-1

10:20-11:30 (1020-1130)

Implementing QoS for Latency-Sensitive Applications

11:30–12:00 (1130–1200)

Determining Bandwidth Requirements and Preparing the Controller for Video

12:00–1:00 (1200–1300)

Lunch

1:00–1:30 (1300–1330)

Determining Bandwidth Requirements and Preparing the Controller for Video (Cont.)

1:30–2:30 (1330–1430)

Lab 5-1

2:30–2:40 (1330–1440)

Break

2:40-3:30 (1440-1530)

Describing Benefits of 802.11n for Video

3:30–4:30 (1530–1630)

Lab 5-2

4:30–5:00 (1630–1700)

Wrap-up


High-Level Course Outline This subtopic provides an overview of how the course is organized. The course contains these components:

� Course Introduction

� Implementation of QoS for Wireless Applications

� Voice over Wireless Architecture

� Implementation of VoWLAN

� Implementation of Multicast over Wireless

� Preparation of the Wireless Network for Video and High-Bandwidth Applications

� Lab Guide

Detailed Course Outline This in-depth outline of the course structure lists each module, lesson, and topic.

Course Introduction

The Course Introduction provides learners with the course objectives and prerequisite learner skills and knowledge. The Course Introduction presents the course flow diagram and the icons that are used in the course illustrations and figures. This course component also describes the curriculum for this course, providing learners with the information that they need to make decisions regarding their specific learning path.

� Overview

— Learner Skills and Knowledge

� Course Goal and Objectives

� Course Flow

� Additional References

— Cisco Glossary of Terms

� Your Training Curriculum


Module 1: Implementation of QoS for Wireless Applications

Upon completing this module, you will be able to implement QoS for wireless applications.

Lesson 1: Identifying General Considerations for Wired and Wireless QoS

This lesson defines how to identify general considerations for end-to-end QoS. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe QoS

� Describe classification and marking

� Describe trust boundary

� Describe congestion management

� Describe congestion avoidance

� Describe policing and shaping

� Describe link efficiency mechanisms

� Describe where each QoS feature is used

� Describe congestion in the wireless space

� Describe the 802.11 DCF mechanism

� Describe 802.11e

� Describe WMM

� Describe 802.11e, 802.1p, and DSCP mapping

The lesson includes these topics:

� QoS Overview

� Classification and Marking

� Trust Boundary

� Congestion Management

� Congestion Avoidance

� Policing And Shaping

� Link Efficiency Mechanisms

� QoS in the Network

� Congestion in Wireless Cells

� 802.11 DCF

� Describing the 80211E Protocol

� Describing WMM Implementations

� 802.11e, 802.1p, and DSC Mapping

The lesson includes this activity:

� Lab 1-1: Configuring QoS on the Controller


Lesson 2: Describing Wireless QoS Deployment Schemes

This lesson defines how to describe wireless QoS deployment schemes. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe QoS parameters for the wireless network.

� Describe the differences between upstream and downstream QoS

� Describe how QoS affects network performance.

This lesson includes these topics:

� QoS Parameters

� Upstream And Downstream QoS

� QoS and Network Performance

This lesson includes this activity:

� Lab 1-2: Configuring End-to-End QoS on a Router

Lesson 3: Configuring the Controller and Cisco WCS for QoS

This lesson defines how to configure the controller and Cisco WCS for QoS. Upon completing this lesson, the learner will be able to meet these objectives:

� Assign a QoS profile to a WLAN on a controller

� Configure QoS profiles on a controller

� Configure voice parameters on the controller.

� Configure EDCA support on the controller.

� Configure QoS roles on a controller

� Configure QoS templates on the Cisco WCS.


� Assign a Cisco WLC QoS Profile to a WLAN on a Controller

� Configure Cisco WLC QoS Profiles

� Configure Cisco WLC Voice Parameters

� Configure Cisco WLC EDCA Support

� Configure Cisco WLC QoS Roles

� Configure QoS Using Cisco WCS


� Lab 1-3: Capturing and Analyzing QoS Parameters


Lesson 4: Configuring the Controller and Cisco WCS for QoS

This lesson defines how to configure the wired infrastructure for QoS. Upon completing this lesson, the learner will be able to meet these objectives:

� Use the modular QoS CLI

� Describe the modular QoS CLI components

� Describe class maps

� Configure and monitor class maps

� Configure and monitor policy maps

� Attach service policies to interfaces

� Configure typical QoS queuing mechanisms

� Describe QoS on a switch

� Configure QoS on a switch

� Monitor QoS on a switch


� Modular QoS CLI

� Modular QoS CLI Components

� Class Maps

� Configure and Monitor Class Maps

� Policy Maps

� Configure and Monitor Policy Maps

� Service Policy

� Attach Service Policies to Interfaces

� Policy Map Examples

� QoS on a Switch

� Configure QoS on a Switch

� Monitor QoS on a Switch

Lesson 5: Understanding Current Best Practice Guidelines

This lesson defines how to understand the current best practices for QoS over wireless implementations. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe how frame sizes affect throughput on the wireless side.

� Configure QoS on a switch linking APs to the controller

� Describe CAPWAP traffic classification

� Evaluate CAPWAP traffic volume and its effect on your network.

� Manipulate CAPWAP marking



� Throughput

� Switch QoS Configuration

� CAPWAP Traffic Classification

� CAPWAP Traffic Volumes

� CAPWAP Marking Manipulation


Module 2: Voice over Wireless Architecture

Upon completing this module, you will be able to describe voice over wireless architecture.

Lesson 1: Describing the evolution of Voice Architecture

This lesson defines how to describe traditional voice architecture. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe traditional voice networks

� Describe how voice is integrated into the data flow with VoIP.


� Traditional Voice Network

� VoIP Network


� Lab 2-1: Managing the WLAN from Cisco WCS

Lesson 2: Describing VoWLAN Call Flow

This lesson defines how to describe voice traffic in a wireless network environment. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe how a wireless VoIP call is set up and how data flows between endpoints

� Describe wireless VoIP protocols and standards

� Describe the main hardware and software components involved in wireless VoIP communication

� Describe some wireless VoIP phones


� Call Setup and Data Flow

� VoIP over Wireless Protocols

� Infrastructure Hardware and Software Components

� Wireless IP Phones

Lesson 3: Designing Wireless for Voice

This lesson defines how to describe what wireless networks are and what topologies are built. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe the general site survey guidelines for VoWLAN

� Describe RF design guidelines for VoWLANs

� Describe combined WLAN services


� Describe VoWLAN security

� Describe VoWLAN roaming

� Describe the benefits of Cisco Compatible Extensions for VoWLAN roaming

� Describe controller position and configuration parameters for VoWLAN optimal roaming

� Describe campus design requirements for supporting VoWLANs

� Describe voice support in mesh networks


� General Site Survey Guidelines

� RF Design Guidelines

� Combinations of WLAN Services

� Voice over WLAN Security

� Voice over WLAN Roaming

� Cisco Compatible Extensions for VoWLANs

� WLAN Controller Configuration and Design

� Campus Network Design

� Voice Support in Mesh Environments

Lesson 4: Verifying Voice Readiness

This lesson defines how to verify if your wireless network is ready for voice deployment. Upon completing this lesson, the learner will be able to meet these objectives:

� Use the Cisco WCS Voice Readiness tool

� Conduct a postdeployment site survey

� Use the AirMagnet VoFi Analyzer


� Cisco WCS Voice Readiness Tool

� Postdeployment Site Survey

� AirMagnet VoFi Analyzer


Module 3: Implementation of VoWLAN

Upon completing this module, you will be able to implement voice over wireless architecture.

Lesson 1: Describing Hardware and Software Requirements for VoIP

This lesson defines how to describe voice hardware and software requirements for VoWLAN. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe Call Control features

� Describe Cisco Unified Communications Manager

� Describe Cisco Unified Communications Manager Express

� Describe dial plans

� Describe Unified Mobility Solutions for single-number reach


� Call Admission Control

� Cisco Unified Communications Manager

� Cisco Unified Communications Manager Express

� Dial Plan

� Cisco Unified Mobility Solutions


� Lab 3-1: Verifying the Network Infrastructure and Placing a Call

Lesson 2: Configuring a WLAN for Voice

This lesson defines how to configure a WLAN for voice. Upon completing this lesson, the learner will be able to meet these objectives:

� Configure the WLAN itself for voice support

� Configure global voice parameters for the controller

� Configure other WLAN parameters that impact voice traffic

� Configure RRM

� Configure data Rates

� Configure WLAN security


� Wireless LAN


� Voice Parameters

� Additional Controller Parameters

� Auto-RF and RRM

� Data Rate Configuration

� WLAN Security


� Lab 3-2: Working with Profiles

Lesson 3: Configuring Infrastructure Devices for End-to-End Voice over Wireless

This lesson defines how to configure infrastructure devices for end-to-end voice over wireless. Upon completing this lesson, the learner will be able to meet these objectives:

� Configure DHCP server options

� Configure DNS server information

� Verify basic Cisco Unified Communications Manager configuration for VoWLAN support

� Verify basic Cisco Unified Communications Manager Express configuration for VoWLAN support

� Secure the voice infrastructure

� Secure the WLAN

� Secure access to the network with the Cisco Secure ACS


� DHCP Server Options

� DNS Option

� Cisco Unified Communications Manager Basic Configuration and Verification

� Cisco Unified Communications Manager Express Basic Configuration and Verification

� Voice Infrastructure Security

� WLAN Security

� Network Infrastructure Security


� Lab 3-3: Configuring Wireless Security for Voice Devices


Lesson 4: Configuring Wireless Client Devices

This lesson defines how to identify general considerations for end-to-end QoS. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe the Cisco Unified Wireless IP Phone 7921G startup process

� Describe the Cisco Unified Wireless IP Phone 7921G web interface

� Configure the Cisco Unified Wireless IP Phone 7921G handset

� Configure Vocera VoWLAN deployments

� Configure SpectraLink VoWLAN deployments

� Configure Nokia VoWLAN deployments


� Wireless IP Phone 7921G Startup Process

� Wireless IP Phone 7921G USB Web Interface

� Wireless IP Phone 7921G Implementation for Voice over WLAN

� Voice over WLAN Vocera Implementation

� Voice over WLAN SpectraLink Implementation

� Voice over WLAN Nokia Implementation


� Lab 3-4: Conducting a VoWLAN Survey

Lesson 5: Troubleshooting VoWLAN

This lesson defines how to troubleshoot VoWLANs. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe controller tools

� Describe Cisco WCS tools

� Describe Spectrum Intelligence

� Describe third-party tools

� Troubleshoot common VoWLAN issues


� Controller Tools

� Cisco WCS Tools

� Spectrum Intelligence

� Third-Party Tools

� Troubleshooting Common Issues



Module 4: Implementation of Multicast over Wireless

Upon completing this module, you will be able to implement multicast over wireless.

Lesson 1: Understanding General Multicast Concepts

This lesson defines how to describe the general multicast concepts. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe multicast

� Describe IP Multicast addresses

� Describe IGMP

� Describe multicast in Layer 2 switching

� Describe protocols used in multicast

� Describe multicast distribution trees

� Describe IP multicast routing

� Describe PIM

� Describe PIM-DM

� Describe PIM-SM


� Multicast Overview

� IP Multicast Addresses

� Internet Group Management Protocol versions 1, 2, and 3

� Multicast in Layer 2 Switching

� Protocols Used in Multicast

� Multicast Distribution Trees

� Introduction to IP Multicast Routing

� Introduction to PIM

� PIM-DM Description

� PIM-SM Description


� Lab 4-1: Configuring the Wireless Network for Multicast

Lesson 2: Describing Implications for Multicast in 802.11

This lesson defines how to describe the implications of multicast in wireless networks. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe the multicast delivery method between controllers and access points


� Describe multicast join and leave processes

� Describe multicast delivery mechanisms

� Describe the impact of roaming on multicast traffic

� Describe multicast deployment considerations

� Describe additional considerations related to multicast in wireless networks

� Describe multicast in mesh networks

� Describe mobility multicast messaging


� Multicast Delivery Method

� Multicast IGMP: Join and Leave

� Multicast Delivery

� Multicast and Roaming

� Multicast Deployment Considerations

� Additional Considerations

� Multicast in Mesh Networks

� Mobility Multicast Messaging

Lesson 3: Configuring Multicast in a Wireless Network

This lesson defines how to configure multicast in a wireless network. Upon completing this lesson, the learner will be able to meet these objectives:

� Enable multicast on a controller

� Configure IGMP snooping on a controller

� Monitor multicast groups on a controller

� Configure Mandatory Data Rates for multicast

� Configure Broadcast Forwarding on a controller

� Configure Mobility Multicast Messaging


� Configure multicast for mesh networks

� Configure a router PIM sparse or sparse-dense mode


� How to Enable Multicast on a WLC

� How to Configure IGMP Snooping on a WLC

� How to Monitor Multicast Group on a WLC

� How to Configure Mandatory Data Rates

� How to Configure Multicast and Broadcast

� How to Configure Multicast for Mesh Networks

� How to Configure Mobility Multicast Messaging

� How to Configure a Router for PIM Sparse or Dense Mode

Lesson 4: Troubleshooting Multicast in a Wireless Network

This lesson defines how to troubleshoot multicast in a wireless network. Upon completing this lesson, the learner will be able to meet these objectives:

� Use basic router multicast troubleshooting tools

� Verify router IGMP groups

� Verify switch IGMP snooping

� Verify and troubleshoot controller multicast


� Router Multicast Troubleshooting Tools

� Router IGMP Troubleshooting Tools

� Switch IGMP Troubleshooting Tools

� Controller Troubleshooting Multicast Tools


Module 5: Preparation of the Wireless Network for Video and High-Bandwidth Applications

Upon completing this module, you will be able to prepare the wireless network for Video and high-bandwidth applications.

Lesson 1: Implementing QoS for Latency-Sensitive Applications

This lesson defines how to implement QoS for latency-sensitive applications. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe the Cisco QoS Toolset

� Describe how QoS can be optimally deployed within an enterprise


� Cisco QoS Tools

� How to Deploy QoS Optimally Within an Enterprise


� Lab 5-1: Creating a Video WLAN

Lesson 2: Determining Bandwidth Requirements and Preparing the Controller for Video

This lesson defines how to determine bandwidth requirements for high-bandwidth applications. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe bandwidth calculation

� Describe the impact of changing payload sizes

� Configure the controller for video applications


� Bandwidth Calculation

� Impact of Changing Payload Sizes

� Configuring the Controller for Video


� Testing Video WLAN and Multicast


Lesson 3: Describing the Benefits of 802.11n for Video

This lesson defines how to describe benefits of 802.11n for Video. Upon completing this lesson, the learner will be able to meet these objectives:

� Describe the benefits of 802.11n for bandwidth-intensive applications

� Describe 802.11n technology

� Describe 802.11n design and deployment guidelines

� Configure a controller for 802.11n


� Benefits of 802.11n for Bandwidth-Intensive Applications

� 802.11n Technology

� 802.11n Design and Deployment Guidelines

� 802.11n Configuration


Course Evaluations Cisco uses a post-course evaluation system, Metrics That Matter (MTM), for its instructor-led courses. The instructor must ensure that each student is aware of the confidential evaluation process and that all learners submit an evaluation for each course. There are two options for learners to complete the evaluation.

For Classes with Internet Access

A URL will be made available, specific to each Cisco Learning Partner. Obtain the URL from your MTM system administrator before the last day of class.

1. Upon completion of the course, instruct the learners to enter the URL into their browser.

2. Make sure that the learners input their email address (used only for a follow-up evaluation).

Note Sixty days following a learning event, learners will receive a brief follow-up evaluation, and,

again, responses will be kept confidential. Email addresses will not be used for marketing purposes. (If learners do not have email addresses, they may type in a “dummy” address.)

3. Instruct the learners to select the appropriate course from the drop-down list.

4. Instruct the learners to complete the course evaluation and click Submit once only.

5. Advise the learners to wait for “Thank you” to appear on the screen before leaving.

For Classes Without Internet Access

A paper-based version of the post-course evaluation is available. Your MTM system administrator can provide you with copies.

1. Distribute paper-based evaluations at the beginning of the last day of class.

2. Instruct the learners to complete the survey only after completing the course.

3. Collect the evaluations and submit them to your MTM system administrator.

To View Evaluation Results

To view your post-course evaluation results:

1. Go to www.metricsthatmatter.com/client. (Reminder: All data is confidential; you will see only your own data.)

2. Log in using your ID and the password sent to you from MTM or provided by your company MTM system administrator to ensure confidentiality.

3. Choose Menu Option – Learner Evaluation Reports:

— Evaluation Retrieval Tool

— Class Evaluation Summary Report

4. Search for and select the appropriate class.


Lab Setup

Overview The purpose of the “Lab Setup” section is to assist in the setup and configuration of the training equipment for Implementing Cisco Wireless Voice Networks (IUWVN) v1.0 course. This section includes these topics:

� Lab Topology

� Hardware and Software Requirements

� Workstation Configuration

� Lab Equipment Configuration

� General Lab Setup

� Lab 1-1: Configuring QoS on the Controller

� Lab 1-2: End-to-End QoS on a Rrouter

� Lab 1-3: Capturing and Analyzing QoS Parameters

� Lab 2-1: Managing the WLAN from Cisco WCS

� Lab 3-1: Verifying the Network Infrastructure and Placing a Call

� Lab 3-2: Working with Profiles

� Lab 3-3: Configuring Wireless Security for Voice Devices

� Lab 3-4: Conducting a VoWLAN Survey

� Lab 4-1: Configuring the Wireless Network for Multicast

� Lab 5-1: Creating a Video WLAN

� Lab 5-2: Testing Video WLAN and Multicast

� Configuration Files Summary

� Lab Activity Solutions

� Teardown and Restoration


Lab Topology This topic describes the lab topology for Implementing Cisco Wireless Voice Networks (IUWVN) v1.0.

This view is limited to two pods for clarity. Eight pods are expected in the Lab Setup. There is only one server in the lab, one Cisco 4402 Wireless LAN Controller, but eight Cisco 2106 WLCs, and nine Cisco Aironet 1252 Access Points.

Lab Topology, backbone view:

© 2009 Cisco Systems, Inc. All rights reserved. IUWVN v1.0—CAG-3

Lab Topology, Backbone View

Cisco

Aironet 1252 AP

Pod Laptop with IntelPro a/b/g/nwireless NIC + AirPcap USB dongle

Catalyst 3560E 24 ports

The figure shows the student pod view of the lab topology.



Lab Topology, Student Pod ViewCisco

Class Aironet 1252 AP

Cisco WLC2106 Aironet

1252 AP Pod Laptop with IntelPro a/b/g/nwireless NIC + AirPcap USB dongle

The figure shows the lab topology switch connections.


Lab Topology, Connections

Aironet 1252 AP

Aironet 1252 AP

Aironet 1252 AP

Aironet 1252 AP Aironet 1252 AP


The class backbone is organized around a Catalyst 3560E Layer 3 switch, used to provide layer 2 and layer 3 connectivity between pods. It is also used as a DHCP server. The class management subnet (10.10.50.0/24) contains a Cisco 4402 WLC and a class Aironet 1252 access point, used to provide wireless connectivity to all pods laptops, and perform one of the labs where a 4402 platform is required. The data subnet also contains a Cisco WCS Server and a Cisco Secure ACS. The class Voice subnet (10.10.60.0/24) contains a Cisco Unified Communications manager Express and a Cisco 7940 IP Phone. The following table summarizes the class core devices information:

Core Devices

Device Name

Device Name Abbreviation

Assigned Pod

Interface

Network Address, Mask /24

Additional Information

Cisco Catalyst 3560E Series Switch

C3560E N/A N/A 10.10.50.1

Cisco WLC Class 4402 controller

4402 N/A N/A 10.10.50.10 AP manager interface, 10.10.50.11

Cisco Aironet Class 1252 Access Point

1252-0 N/A NIC DHCP

Cisco Unified Communications Manager Express

CUCME N/A N/A 10.10.60.60

Cisco Unified Wireless IP Phone 7940

7940 N/A N/A DHCP

Cisco Secure Access Control Server v 4.2

ACS N/A N/A 10.10.50.5

Cisco WCS server

WCS N/A N/A 10.10.50.100


Each pod comprises a 2106 WLC, one 1252 AP, one laptop and two 7921 phones. The following table lists the required workgroup devices for an 8 pod class:

Workgroup Devices

Device Name


Assigned Pod

Interface

Network Address, mask /24


Cisco 2106 WLC pod 1

2106-1 1 1 10.10.51.10/24

AP Manager 10.10.51.11/24

Aironet 1252 Access Point group 1

1252-1 1 NIC DHCP

Laptop group 1 Laptop 1 1 WNIC DHCP

Wireless IP Phone 7921 group 1

7921G-1a 1 WNIC DHCP


7921G-1b 1 WNIC DHCP


2106-2 2 1 10.10.52.10/24

AP Manager 10.10.52.11/24


1252-2 2 NIC DHCP







2106-3 3 1 10.10.53.10/24

AP Manager 10.10.53.11/24


1252-3 3 NIC DHCP







2106-4 4 1 10.10.54.10/24

AP Manager 10.10.54.11/24


1252-4 4 NIC DHCP







2106-5 5 1 10.10.55.10/24

AP Manager 10.10.55.11/24

Aironet 1252 Access 1252-5 5 NIC DHCP


Device Name


Assigned Pod

Interface

Network Address, mask /24


Point group 5







2106-6 6 1 10.10.56.10/24

AP Manager 10.10.56.11/24


1252-6 6 NIC DHCP


Laptop 6 6 WNIC DHCP

Laptop group 6 7921G-6a 6 WNIC DHCP




2106-7 7 1 10.10.57.10/24

AP Manager 10.10.57.11/24


1252-7 7 NIC DHCP







2106-8 8 1 10.10.58.10/24

AP Manager 10.10.58.11/24


1252-8 8 NIC DHCP







C3560E Cabling

VLAN Interface Remote Device Interface Remarks

TR Gi0/0/1 2106-1 1 TRUNK

TR Gi0/0/2 2106-2 1 TRUNK

TR Gi0/0/3 2106-3 1 TRUNK

TR Gi0/0/4 2106-4 1 TRUNK

TR Gi0/0/5 2106-5 1 TRUNK

TR Gi0/0/6 2106-6 1 TRUNK

TR Gi0/0/7 2106-7 1 TRUNK

TR Gi0/0/8 2106-8 1 TRUNK

51 Gi0/0/9 1252-1 NIC

52 Gi0/0/10 1252-2 NIC

53 Gi0/0/11 1252-3 NIC

54 Gi0/0/12 1252-4 NIC

55 Gi0/0/13 1252-5 NIC

56 Gi0/0/14 1252-6 NIC

57 Gi0/0/15 1252-7 NIC

58 Gi0/0/16 1252-8 NIC

1 Gi0/0/17

1 Gi0/0/18

1 Gi0/0/19

50 Gi0/0/20 1252-0 NIC

50 Gi0/0/21 ACS NIC

50 Gi0/0/22 WCS NIC

TR Gi0/0/23 4402 1

60 Gi0/0/24 CUCME f0/0


3560E IP Addresses

VLAN IP address Mask Remarks

50 10.10.50.1 /24

51 10.10.51.1 /24

52 10.10.52.1 /24

53 10.10.53.1 /24

54 10.10.54.1 /24

55 10.10.55.1 /24

56 10.10.56.1 /24

57 10.10.57.1 /24

58 10.10.58.1 /24

60 10.10.60.1 /24


Hardware and Software Requirements Hardware List

The hardware listed in the following table is suggested for this learning product.

Description Mfr. Part Number Total Qty.

Classroom Network Equipment

Ethernet Laptop Server (Windows 2003 Server; 4-GB memory minimum; 2.0+ GHz processor, 10/100 Ethernet) – used for Cisco Secure ACS and Cisco WCS software

Various HW Vendor Dependant 2

Cisco 4402-12 WLC (configured by learners)

Cisco AIR-WLC4402-12-K9 1

1000BASE-T SFP for Cisco 4402 WLC Cisco GLC-T 1

Catalyst 3650 E switch with 24 POE ports

Cisco WS-C3650E-24PS-E

1

HW+SW Cisco Unified Communications Manager Express

Cisco CISCO2811-CCME/K9

MEM2811-256U512D

MEM2800-128U256CF

1

Aironet 1252 a/b/g/n Access Point (shared AP access)

Cisco AIR-LAP1252-X-K9 1

Cisco Unified P Phone 7940G Cisco CP-7940G

1

Category 5 cable Various N/A 8

Student PODs (8 pods 2learners per pod)

Cisco 2106 WLC (1 per pod) Cisco AIR-WLC2106-K9 8

Aironet 1252 a/b/g/n Access Point (1 per pod)

Cisco AIR-LAP1252-X-K9 8

Wireless laptop (WinXP Pro; 2-GB memory; USB; 2.0+ GHz processor; Intel wireless card such as 4965 or newer (1 per pod)

Various HW Vendor Dependant 8

Cisco VT2 USB Webcam Cisco CUVA-V2 8

AirPcap Classic USB 802.11b/g adapter CACE SW Vendor Dependant 8

Wireless IP Phone 7921 ( 2 per pod ) Cisco CP-7921G-X-K9 16


Software List The software listed in the following table is suggested for this learning product.

Description Mfr. Part Number Qty.

Classroom Network Software

Cisco Secure ACS 4.2 for Windows Cisco CSACS-4.2-WIN-K9 1

Cisco WCS version 5.2 with location Cisco WCS-STANDARD-K9

WCS-APBASE-50

1

Cisco IOS Software Release 12.4 for Catalyst switches

Cisco c3560e-universal-mz.122-44.SE3.bin

1

Cisco 4402-12 WLC code 5.2 Cisco AIR-WLC4400-K9-5-2-157-0.aes 1

Cisco 2106 WLC code 5.2 Cisco AIR-WLC2100-K9-5-2-157-0.aes 8

Server: Windows 2003 Microsoft N/A 2

Student POD Software

PCs: Windows XP Pro

Microsoft N/A 8

cipc-Admin-ffr.7-0-1-0.zip Cisco iuwvn_student_files\IUWVN 8

FileZilla_3.1.6_win32-setup.exe FileZilla iuwvn_student_files\IUWVN 8

USB-Install-7921.1-0-1.exe Cisco iuwvn_student_files\IUWVN 8

wireshark-setup-1.0.4.exe Wireshark iuwvn_student_files\IUWVN 8

vlc-0.9.8a-win32.exe VLC iuwvn_student_files\IUWVN 8

setup_airpcap_3_2_3.exe CACE iuwvn_student_files\IUWVN 8

cuva-Admin-fmr.2-1-2.zip Cisco iuwvn_student_files\IUWVN 8


Workstation Configuration These instructions describe how to set up the lab when workstations are required.

Lab Laptops Step 1 Install XP SP3, plus any critical category patch for Windows XP Pro, BIOS, and the

Intel wireless card.

Step 2 Put the IUWVN folder, along with the files that it contains, on the desktop.

Step 3 Add to the IUWVN folder the Cisco Secure Access Control Server (Cisco Secure ACS) certificate generated for the common equipment.

Step 4 Install the programs present in the IUWVN folder. Refer to the lab setup readme documents.


Lab Equipment Configuration This equipment configuration information is necessary for initial setup of the lab configuration.

Learners can access their controllers both from the command-line interface (CLI) using the terminal server and from the web interface using their connection to the switch.

� Save in startup-config of the Catalyst 3560E configuration file “IUWVN_switch.txt.”

� Ensure that all equipment is wired properly to its respective port.

� Ensure that the controllers are configured properly.

� One Cisco Aironet 1252 Access Point should be connected to the Cisco 2106 WLC of each pod, and one AP should be connected to the class controller.

Refer to the lab setup readme documents.


General Lab Setup This information details the procedure to set up and configure the lab equipment.

Step 1 Set up the class switch. The class switch is expected to be a Cisco Catalyst 3560E-24PD with c3560e-universal-mz.122-44.SE3.bin IOS. Use the IUWVN_switch.txt file and copy it to your switch. By doing show running-config, you will see a description of each port to determine which device to connect to each respective port.

Step 2 Connect and prepare the Cisco WCS. You will use it to provision the controllers. Read the WCS_WLC_setup file. You will create a campus map using OutdoorArea- SJ14.JPG and will position bigfile.txt under the WCS FTP folder on the Cisco WCS server. You will use the campus map for Lab 2-1 and will use bigfile.txt in Lab 1-3 to test FTP download throughput.

Step 3 Verify that the backbone Cisco 4402 WLC and the learners’ pod WLC2106s are connected to the correct respective switch port from Step 1. Read WCS_WLC_setup.doc to learn how to provision them.

Step 4 Connect and configure the APs. You merely need to verify that each respective AP is associated to the correct controller (backbone or pod). Use the AP MAC addresses on the switch ports to verify the AP MAC addresses and then use the controller’s GUI to verify that the correct AP joined the correct controller. Proceed to rename the APs from the controllers to a more descriptive name such as “Backbone,” “Pod2,” and so on.

Step 5 Connect and configure the Cisco Secure ACS. Read ACS_setup.doc and create a certificate during setup. You will add this certificate to a IUWVN folder (in the iuwvn_students_files) and copy to the individual learners’ laptops.

Step 6 Connect and configure the Cisco Unified Communications Manager Express. Read cucme_setup. You will use the Cisco Unified Communications Manager Express software and the cucme_config.txt.

Step 7 Test: Connect and turn on the instructor IP phone. The instructor IP phone connects to port g0/19, which is in VLAN 50. Given a successful intra Wireless IP 7921G phone call from Step 6, verify the student pod phones to the instructor IP phone.

Note It is recommended that you configure manually the MAC address into Cisco Unified

Communications Manager Express to ensure phone-to-directory number mapping.

Step 8 Configure the student’s PC. Install the student IUWVN folder on each student desktop. Install each program in the folder in the following order:

1. VLC

2. FileZilla

3. AirPcap

4. Wireshark (overrides AirPcap driver)

5. Cisco IP Communicator

6. Cisco VT CameraDriver

7. Cisco Unified Video Advantage

Installations are left to their default values except:


� Cisco Unified Video Advantage: When installing the program, unclick the Start Automatically when Windows Starts option.

� Cisco IP Communicator is installed with its default. When installed, launch the program and set the default TFTP server to the IP address 10.10.60.60.

Here are the key credentials for the IUWVN class. You may want to use this table as a reminder for your learners:

Device IP address Credentials

Cisco Secure ACS 10.10.50.5/24 admin/cisco

Cisco WCS 10.10.50.100/24 root/Public1!


10.10.60.60/ccme.html admin/cisco

Backbone Cisco 4402 WLC 10.10.50.10 admin/cisco

Pods Cisco WLC2106 10.10.5X.10 adminX/cisco


Lab 1-1: Configuring QoS on the Controller Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab you will configure the wired and wireless infrastructures for QoS. After completing this activity, you will be able to meet these objectives:

� Configure and verify throughput for a normal guest user without QoS Role enabled.

� Configure and verify throughput for a guest user restricted by Guest QoS Role.

Visual Objective The figure illustrates what you will accomplish in this activity.


Visual Objective for Lab 1-1: Configure QoS on the Controller

Aironet 1252 AP

Aironet 1252 AP

CiscoCisco

Catalyst 3560E

CiscoWLC2106


Setup The table describes how to set up lab configurations with equipment for this lab.

Device Configuration File to Install Configuration Instructions

IUWVN_switch IUWVN_switch.txt Refer to the port description to know which device connects to which port.


Cucme.txt Test by registering one phone.

Class 4402 IUWVN_CLass_4402_confg.txt Verify the country code.

Pods 2106 WLCX.txt Replace X with the relevant pod number. Verify the country code.

Additional Setup Notes Follow the readme documents to prepare for the lab. After the lab initial configuration is performed, there is no further configuration task required.

This lab is performed on the class common controller.

Common Issues This subtopic presents common issues for this lab:

� Slow throughput: Depending on the class environment, learners may experience variable speed in the download. Although pods may find different speeds, the main point is for them to experience the difference between default speed and contract speed. These variations should not affect the lab.


Lab 1-2: Configuring End-to-End QoS on a Router

Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab, you will configure QoS using Modular QoS CLI (MQC) for a theoretical network edge router. In this scenario, your router connects to a WAN link, and you want to ensure that voice traffic coming from your wireless network is given priority on the WAN link. After completing this activity, you will be able to meet these objectives:

� Configure classes

� Configure a policy map

� Apply the policy map to an interface.

� Verify QoS on the class backbone switch



Visual Objective for Lab 1-2: End-to-End QoS on a Router

Cisco

Aironet 1252 AP

Catalyst 3560E


Setup There is no specific configuration task required for this lab. It is built on the resulting configuration of the previous lab.

Instructor Notes In this lab, learners will create a simple QoS configuration (class map, policy map) and apply it to a loopback interface on the router used for the Cisco Unified Communications Manager Express. This configuration will not be tested, and is just used for learners to practice what they learned in the first module.


� Cisco Unified Communications Manager Express unreachable: The lab is performed on the Cisco Unified Communications Manager Express, where learners have full administrative access. If a student tries to apply QoS to the real interfaces and blocks the router, you can reinject the Cisco Unified Communications Manager Express initial configuration if necessary.


Lab 1-3: Capturing and Analyzing QoS Parameters


Activity Objective In this lab you will test how the QoS parameters defined in the previous lab are seen in the wireless communication between the AP and the wireless cell. To test these parameters, you will try several QoS configuration parameters on the Cisco WLC and each time capture the AP beacons with Wireshark, to examine carefully the QoS section of the frame. This will allow you to understand what information your phone receives when connecting to the wireless network. Upon completion of this lab, you will be able to achieve the following objectives:

� Verify beacons and QoS settings

� Change WLAN QoS settings and verify impact on WLAN

� Change the cell QoS level and verify its impact on the WLAN



Visual Objective for Lab 1-3: Capturing and Analyzing QoS Parameters

Aironet 1252 AP

Catalyst 3560E

CiscoWLC2106



Instructor Notes In this lab, learners connect to their controller and configure a WLAN with Wi-Fi Multimedia (WMM) parameters. They then use Wireshark to capture the beacon frames and locate the various WMM elements in the capture. Throughout the lab, they change the WMM settings and observe how these changes affect the frames.


� No management frames: No management frame appears in the capture. Make sure that learners are using the AirPcap USB dongle as capture interface. Most standard cards cannot operate in monitor mode to capture management frames and only report data frames.

� My SSID is not seen: Students are asked to set their AirPcap card to the channel matching their pod AP channel. Failure to do so results in capture not displaying packets belonging to the pod AP. Verify under Wireshark > Capture > AirPcap > Options > Wireless settings that the channel is properly set.


Lab 2-1: Managing the WLAN from Cisco WCS Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab you will create various QoS templates and verify reports on the Cisco WCS. At the end of this lab, you will be able to achieve the following:

� Add your controller to the Cisco WCS

� Use Planning mode on the Cisco WCS

� Verify Voice Readiness on the Cisco WCS

� Create QoS templates on the Cisco WCS

� Create TSM templates on the Cisco WCS

� Create a WLAN template on the Cisco WCS

� Configure Voice parameters on the Cisco WCS

� Configure reports for voice on the Cisco WCS



Visual Objective for Lab 2-1: Managing the WLAN from Cisco WCS

Aironet 1252 AP

Catalyst 3560E

Cisco WLC2106



Instructor Notes In this lab, learners use the Cisco WCS to verify voice parameters. They first draw a map with MAP editor and then use voice readiness in planning mode. In the second part of the lab, they practice using the Cisco WCS voice-related configuration items, such as QoS templates, Traffic Stream Metrics (TSM) templates, WLAN template with WMM configuration, and voice reports.


� No available floor: Each pod creates a floor map based on the already existing campus map and building you created. If some pods use more than one floor by mistake, you may run short of floors. Simply create another building on the same campus and ask the remaining pods to use this second building. There is no direct relationship between floors that would compel several pods to be in the same building.

� My AP does not appear: Each pod is supposed to add their AP to a floor. It might be tempting for some pods to add all the available APs to their floor, thus also adding other pods APs. In that case, these others pods have no possible AP to add to their floor map. Verify if the missing AP is seen under Monitor > Access Point, and identify on which floor the AP is seen. Remove the AP from the wrong floor to make it available to the port to which it belongs.


Lab 3-1: Verifying the Network Infrastructure and Placing a Call


Activity Objective In this activity, you will verify the infrastructure configuration for voice. You will then connect your Cisco Unified Wireless IP Phone 7921G to the network and see it register to the class Cisco Unified Communications Manager Express. After completing this activity, you will be able to meet these objectives:

� Watch the 7921G Out-of-the-Box Configuration

� Verify phone configuration and call your instructor

� Verify the infrastructure configuration

� Verify QoS marking on wireless packets



Visual Objective for Lab 3-1: Verifying the Network Infrastructure and Placing a Call

Aironet 1252 AP Catalyst 3560E

Cisco WLC 4402



Instructor Notes This lab is the first lab of the voice series. In this lab, learners learn to navigate the Wireless IP Phone 7921G and provide basic configuration. They also check the wired infrastructure configuration for QoS and see how wireless voice frames are marked for WMM.


� Phone extension and registration issues: In Task 3, learners access the Cisco Unified Communications Manager Express to change their pod phone extensions. Wrong configuration items can affect the way phones register and obtain their extension. If learners complain about phone registration to Cisco Unified Communications Manager Express or an extension display issue, verify the corresponding ephone and ephone-dn entries. Another pod may have changed its phone to an extension already registered to a phone or changed by mistake the phone parameters of another pod.


Lab 3-2: Working with Profiles Complete this lab activity to practice what you learned in the related module.

Activity Objective In this activity, you will connect your Wireless IP Phone 7921G to the network and Cisco Unified Communications Manager Express. After completing this activity, you will be able to meet these objectives:

� Install the Wireless IP Phone 7921G USB driver

� Configure the USB network interface

� Download profiles to your phone

� Check and modify profiles

� Save your configuration



Visual Objective for Lab 3-2: Working with Profiles

Aironet 1252 AP

Catalyst 3560E

Cisco WLC4402



Instructor Notes In this lab, learners work with the Wireless IP Phone 7921G USB web configuration interface. They install the USB configuration driver and then use the web interface to configure the phone and download pre-existing profiles to their Wireless IP Phone 7921G.


� Driver will not install: The Cisco USB 7921G USB driver requires Windows XP with SP2 or later. With older service packs, this program might not install. Update the PC to SP2 or later to solve this issue.

� USB to phone connectivity issues: The USB driver creates a virtual interface. The interface is activated when the phone is connected through the USB cable. When the cable is removed, the connection is hidden (it does not disappear from Windows but is no longer displayed). Learners connecting and disconnecting the cable too fast may not give enough time for the connection to activate. Allow 10 to 12 seconds for the connection to appear. A phone must be connected (and the phone must be on) for the connection to activate. Note that the interface is created on a per-USB port basis. Students connecting the cable to a new USB port might complain that the interface is re-created and that they cannot re-assign the same IP address. Make sure that the USB cable is always connected to the same USB port to avoid this issue.

� I cannot connect: Some learners might complain that they cannot connect to the WEP SSID that they received through the imported profile. Remind them that this is part of the lab and ask them to read on. The WPA profile was imported with the PSK, and the WEP profile was imported without the key. They have to enter it manually. The WEP key is cisco, the WPA key is cisco!cisco.


Lab 3-3: Configuring Wireless Security for Voice Devices


Activity Objective In this activity, you will create several WLANs on the controller and configure your phone to associate to them. These WLANs will use local Extensible Authentication Protocol (EAP), or external authentication to a RADIUS server, using EAP-Flexible Authentication via Secure Tunneling (FAST) or Protected Extensible Authentication Protocol (PEAP). You will then verify if you can call with these security parameters. After completing this activity, you will be able to meet these objectives:

� Create a WLAN

� Create a local EAP profile

� Configure your Wireless IP Phone 7921G for EAP authentication on your controller

� Create a common WLAN for two pods.

� Configure the Cisco Secure ACS AAA client and user information

� Configure one phone for EAP-FAST

� Configure the second phone for PEAP



Visual Objective for Lab 3-3: Configuring Wireless Security for Voice Devices

Aironet 1252 AP

Aironet 1252 AP

CiscoCisco

Catalyst 3560E



Instructor Notes In this lab, learners configure security on their Wireless IP Phone 7921G. They start by configuring LEAP with local EAP on their controller and then configure EAP-FAST and PEAP on the Cisco Secure ACS. In each case, they verify that they can configure both the phone and the infrastructure.


� Authentication issues with EAP-FAST: Some learners misconfigure EAP-FAST and cannot authenticate. First verify if the issue is related to EAP-FAST or the external EAP. Ask learners to try LEAP, still with the same configuration. The Cisco Secure ACS is configured to accept both. If LEAP fails, start by verifying the RADIUS configuration on the controller. Then, check the client and user configuration on the Cisco Secure ACS. Take those steps before trying the debug pem and debug aaa commands on the controller. If LEAP succeeds, verify on the controller that the eap max-request timeout is set to 20 seconds at least.

� PEAP certificate issue: To create the PEAP authentication, pods need to download the Cisco Secure ACS root certificate. If the certificate does not install on the Wireless IP Phone 7921G, it is probably because it was not exported properly. Read the Cisco Secure ACS setup document and re-export the certificate with the correct format.


Lab 3-4: VoWLAN survey Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab, you will configure the wired and wireless infrastructures for VoWLAN. You will then work in teams to design two overlapping cells ready for voice communication and test roaming between them. After completing this activity, you will be able to meet these objectives:

� Conduct a basic survey for VoWLAN

� Adjust controller parameters for better voice support

� Conduct a survey for VoWLAN with voice parameters

� Establish respective 802.11a and 802.11b/g RF boundaries

� Test roaming between 802.11a and 802.11b/g bands



Visual Objective for Lab 3-4: VoWLAN Survey

Aironet 1252 AP

Aironet 1252 AP

Cisco

Catalyst 3560E

CiscoWLC2106



Instructor Notes In this lab, pods work in pairs to configure a common WLAN and experiment with roaming. They will need to move the access points in the room to determine the distance of the –67 dBm cell edge. They then try to roam between access points.


� Network busy: In this lab, learners are not required to configure wireless CAC, because some wireless environments can create too much interference for wireless CAC to allow even one single call. Because you cannot run a site survey before each class, wireless CAC is disabled to allow calls in all conditions. Some learners might follow the lab guide and configure wireless CAC, even if the lab guide does not ask them to do so. In a difficult RF environment, the effect is that Wireless IP 7921G phones cannot place calls and get a network-busy message. Verify that wireless CAC is disabled to solve this issue.

� No roaming: Some learners complain that phones do not roam but stay connected to the same AP. If the AP signal is high enough, the phone has no reason to roam. Ask the learners to move the APs apart to a greater distance and to reduce the AP power level to ease roaming. It may happen that the classroom size does not allow for proper roaming. If you cannot place obstacles (light wall) between APs, then it may be impossible to fully test roaming.


Lab 4-1: Configure the Wireless Network for Multicast


Activity Objective In this lab, you will configure the wired and wireless infrastructures for multicast. After completing this activity, you will be able to meet these objectives:

� Configure your controller for multicast

� Test multicast in a wireless network



Visual Objective for Lab 4-1: Configure the Wireless Network for Multicast

Aironet 1252 AP

Cisco

Catalyst 3560E



Instructor Notes In this lab, learners will configure their controller for multicast support. They will then place a call to their peer Wireless IP Phone7921G and put the call on hold. The Cisco Unified Communications Manager Express will then send music on hold via multicast. They will try to capture this multicast message and verify that it is relayed by their controller.


� No music on hold: Music on hold is heard only on the phone placed on hold, not on the phone placing the other phone on hold. Verify that learners listen to the correct phone. Also verify that multicast is allowed on the pod controller.


Lab 5-1: Creating a Video WLAN Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab you will configure the wired and wireless infrastructures for video. After completing this activity, you will be able to meet these objectives:

� Prepare the Cisco Unified Communications Manager Express for Cisco IP Communicator

� Configure a video WLAN and monitor video flow

� Test video conversation with Cisco IP Communicator



Visual Objective for Lab 5-1: Create a Video WLAN

Aironet 1252 AP

Cisco

Cisco WLC 2106

Catalyst 3560E

Aironet 1252 AP



Instructor Notes In this lab, learners assign one of their Wireless IP Phone 7921G extensions to Cisco IP Communicator. They reassign the extension instead of using a new extension to limit the affect of this lab on your Cisco Unified Communications Manager Express licenses. Pods also configure their IP communicator extension to support video. They then connect the Cisco Video Telephony Camera (Cisco VT Camera) and place a video call from one pod to the other.


� Cisco Unified Video Advantage does not connect to Cisco IP communicator:The IP communicator needs to be registered into Cisco Unified Communications Manager Express with video capabilities to connect to Cisco Unified Video Advantage. If Cisco IP Communicator connects without video capabilities, Cisco Unified Video Advantage displays a broken (red) link and a message stating that it could not find the IP communicator. Verify that the ephone configuration for that phone shows video capability and the Cisco IP Communicator type. Missing type or missing capability prevents the association to Cisco Unified Video Advantage. If both lines are present, a camera appears on the IP communicator screen.


Lab 5-2: Video WLAN and Multicast Complete this lab activity to practice what you learned in the related module.

Activity Objective In this lab you will send a video stream using multicast from one laptop over the wireless network. From another machine, you will register for the video feed coming from this first laptop and will try to view the video sent via multicast packets. This second machine will be accessing the feed also from the wireless space, but through another SSID on another access point. After completing this activity, you will be able to meet these objectives:

� Test video traffic on a congested channel

� Test video stream on a dedicated channel



Visual Objective for Lab 5-2: Video WLAN and Multicast

Aironet 1252 AP

Aironet 1252 AP

Cisco WLC 2106

Cisco WLC 2106

Catalyst 3560E



Instructor Notes In this lab, one pod configures a VLC media player to stream a video signal over multicast, and the other pod tries to read the stream.


� Low quality: Students first try the stream on 802.11b/g, which probably creates interference issues between pods and most likely with the surrounding APs in your class environment. They then experiment with the same stream on 802.11a, in which each pod has a dedicated channel. The surrounding class may have APs creating interferences on the channel of some pods.


Configuration Files Summary This topic details the course configuration files, which provide information about the starting condition of each lab.

Configuration Filename Comments

IUWVN_switch.txt Main switch configuration, to inject when setting up the lab before the course

bigfile.txt To put in Cisco WCS FTP folder for downloads in Module 1 labs

OutdoorArea- SJ14.JPG To use when configuring the Cisco WCS before the class, as a campus map

IUWVN_Class4402.cfg Class controller configuration, to inject when setting up the lab before the course

WLCx.cfg Podx 2106 controller, to inject when setting up the lab before the course configuration

cucme_config.txt Cisco Unified Communications Manager Express config file, , to inject when setting up the lab before the course


Lab Activity Solutions This section presents the solutions to the practice activities.

Lab 1-1 Answer Key: Configuring QoS on the Controller When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Task 1, Step 46: The speed depends on your class environment, Typical values range from 1 to 5 Mb/s, with network utilization from 15 to 40 percent.

Task 1, Step 49: The speed is typically 54 Mb/s, which can change, depending on your class environment.

Task 2, Step 50: Depending on your speed, download can take 3 to 5 mn, with a throughput of 50 kb/s or less.

Lab 1-2 Answer Key: Configuring End-to-End QoS on a Router When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Class-map voice2

match protocol rtp audio

class-map match-any signaling2

match protocol skinny

match protocol h323

match protocol mgcp

match protocol sip

exit

policy-map priority2

class voice2

set ip dscp ef

priority percent 30

class signaling2

set ip dscp cs3

bandwidth 5

exit

interface loopack2

ip address 10.10.65.22 255.255.255.255

service policy output priority2


Lab 1-3 Answer Key: Verifying QoS Parameters When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Task 2, Step 26: QBSS is version 2; station count and channel utilization depend on your class RF environment.

Task 2, Step 29: Your results should be similar to the displayed screenshot.

Task 3, Step 39: Your results depend on your class environment; typically around 100.

Task 3, Step 59: Available Admission Capabilities should be 0.

Task 3, Step 61: Aironet IE type should be 1.

Task 3, Step 82: Available Admission Capabilities should be a large number, typically close to 32768.

Task 3, Step 82: The tag interpretation should be 802.11e.

Task 3, Step 88: The expected values are shown in this table:

AIFSN ECWmin ECWmax TXOP

Best Effort 3 4 4 0

Background 7 4 4 0

Video 2 3 3 94

Voice 2 2 2 47

Task 3 Step 115: The expected values are shown in this table:

AIFSN ECWmin ECWmax TXOP

Best Effort 5 6 6 0

Background 12 8 8 0

Video 5 3 3 0

Voice 2 2 2 0


Lab 3-1 Answer Key: Placing a Call When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Task 1:

Step 16: The TFTP server IP address is 10.10.60.60.

Step 17: The version should be 1.2.1. Your class configuration might be different.

Step 22: The max ephone and max-dn should be 18. Loads should be 1.2.1. Your class configuration might be different.

Task 2:

Step 20: The SSID is cisco.

Step 21: The authentication is Open.

Step 26: The firmware version should be 1.2.1. Ask you your instructor if another firmware is used in your class.

Lab 3-2 Answer Key: Working with Profiles There is no answer key for this lab activity.

Lab 3-3 Answer Key: Authenticating on a Controller and Surveying the Network

When you complete this activity, your configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Controller configuration: (Cisco Controller) >show running-config 802.11a cac voice acm enable 802.11a cac voice tspec-inactivity-timeout ignore 802.11a cac video tspec-inactivity-timeout ignore 802.11a cac voice load-based enable 802.11a cac voice stream-size 84000 max-streams 2 802.11a tsm enable 802.11b cac voice acm enable 802.11b cac voice tspec-inactivity-timeout ignore


802.11b cac video tspec-inactivity-timeout ignore 802.11b cac voice load-based enable 802.11b cac voice stream-size 84000 max-streams 2 802.11b tsm enable aaa auth mgmt local radius advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 sta_tx_pwr 0 0 0 advanced 802.11b tx-power-control-thresh -65 Location Summary Algorithm used: Average Client RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db Calibrating Client RSSI expiry timeout: 5 sec Half life: 0 sec Rogue AP RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db RFID Tag RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db location rssi-half-life tags 0 location rssi-half-life client 0 location rssi-half-life rogue-aps 0 location expiry tags 5 location expiry client 5 location expiry calibrating-client 5 location expiry rogue-aps 5 advanced eap identity-request-timeout 2 advanced eap request-timeout 2 Cisco Public Safety is not allowed to set in this domain ap syslog host global 255.255.255.255 country US,FR,DE,CN local-auth eap-profile add LEAP2 local-auth eap-profile cert-issuer cisco LEAP2 local-auth eap-profile method add leap LEAP2 local-auth method fast authority-id abc20000000000000000000000000000 "IUWVN Pod 2" local-auth method fast pac-ttl 40 local-auth method fast server-key 12 interface create cucme 0 interface address ap-manager 10.10.50.11 255.255.255.0 10.10.50.1 interface address dynamic-interface cucme 10.10.60.22 255.255.255.0 10.10.60.1 interface address management 10.10.50.10 255.255.255.0 10.10.50.1 interface address virtual 1.1.1.1 interface dhcp ap-manager primary 10.10.50.11 interface dhcp management primary 10.10.50.10 interface port ap-manager 1 interface port cucme 1 interface port management 1 load-balancing window 5 logging buffered 5 logging console 5 logging procinfo disable logging traceinfo disable emergencies mesh security eap mgmtuser add admin55 **** read-write mobility group domain training2 mobility dscp 0 netuser add student2 **** wlan 2 userType permanent description Pod 2 user netuser wlan-id student2 2 network webmode enable network telnet enable


network multicast mode multicast 0.0.0.0 network mgmt-via-wireless enable network mgmt-via-dynamic-interface enable network ap-priority disabled network otap-mode disable network rf-network-name iuwvn2 qos average-realtime-rate platinum 50 qos burst-realtime-rate platinum 50 rogue ap ssid alarm rogue ap valid-client alarm rogue adhoc enable rogue adhoc alert rogue ap rldp disable sessions timeout 0 snmp version v2c enable snmp version v3 enable sysname IUWVN trapflags 802.11-Security ids-sig-attack disable wlan create 2 LEAP2 iuwvn12 wlan nac disable 1 wlan nac disable 2 wlan local-auth enable LEAP2 2 wlan qos 2 platinum wlan session-timeout 1 1800 wlan session-timeout 2 1800 wlan wmm allow 1 wlan wmm require 2 wlan security wpa disable 1 wlan security static-wep-key enable 6 wlan security static-wep-key encryption 2 104 <mode unknown> <passwd hidden> 1 wlan security wpa akm ft reassociation-time 20 1 wlan security wpa akm ft over-the-air enable 1 wlan security wpa akm ft over-the-ds enable 1 wlan security wpa akm ft reassociation-time 20 2 wlan security wpa akm ft over-the-air enable 2 wlan security wpa akm ft over-the-ds enable 2 wlan security wpa wpa1 ciphers tkip enable 2 wlan enable 2 (Cisco Controller) > Layer 3 switch configuration ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname IUWVN ! enable password cisco ! no aaa new-model system mtu routing 1500 ip subnet-zero ip dhcp excluded-address 10.10.50.1 10.10.50.100 ip dhcp excluded-address 10.10.51.1 10.10.51.100 ip dhcp excluded-address 10.10.52.1 10.10.52.100 ip dhcp excluded-address 10.10.53.1 10.10.53.100 ip dhcp excluded-address 10.10.54.1 10.10.54.100 ip dhcp excluded-address 10.10.55.1 10.10.55.100 ip dhcp excluded-address 10.10.56.1 10.10.56.100 ip dhcp excluded-address 10.10.57.1 10.10.57.100 ip dhcp excluded-address 10.10.58.1 10.10.58.100 ip dhcp excluded-address 10.10.60.1 10.10.60.100 !


ip dhcp pool cucme network 10.10.60.0 255.255.255.0 default-router 10.10.60.1 option 150 ip 10.10.60.60 ! ip dhcp pool backbone network 10.10.50.0 255.255.255.0 default-router 10.10.50.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod1 network 10.10.51.0 255.255.255.0 default-router 10.10.51.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod2 network 10.10.52.0 255.255.255.0 default-router 10.10.52.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod3 network 10.10.53.0 255.255.255.0 default-router 10.10.53.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod4 network 10.10.54.0 255.255.255.0 default-router 10.10.54.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod5 network 10.10.55.0 255.255.255.0 default-router 10.10.55.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod6 network 10.10.56.0 255.255.255.0 default-router 10.10.56.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod7 network 10.10.57.0 255.255.255.0 default-router 10.10.57.1 option 150 ip 10.10.60.60 ! ip dhcp pool pod8 network 10.10.58.0 255.255.255.0 default-router 10.10.58.1 option 150 ip 10.10.60.60 ! ! mls qos map cos-dscp 0 8 16 24 34 46 48 56 ! ! no file verify auto spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! interface FastEthernet0 no ip address shutdown ! interface GigabitEthernet0/1 description to pod 1 controller switchport trunk encapsulation dot1q switchport mode trunk


! interface GigabitEthernet0/2 description to pod 2 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/3 description to pod 3 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/4 description to pod 4 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/5 description to pod 5 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/6 description to pod 6 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/7 description to pod 7 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/8 description to pod 8 controller switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/9 description to pod 1 AP switchport mode access switchport access vlan 51 spanning-tree portfast ! interface GigabitEthernet0/10 description to pod 2 AP switchport mode access switchport access vlan 52 spanning-tree portfast ! interface GigabitEthernet0/11 description to pod 3 AP switchport mode access switchport access vlan 53 spanning-tree portfast ! interface GigabitEthernet0/12 description to pod 4 AP switchport mode access switchport access vlan 54 spanning-tree portfast ! interface GigabitEthernet0/13 description to pod 5 AP switchport mode access switchport access vlan 55 spanning-tree portfast ! interface GigabitEthernet0/14 description to pod 6 AP


switchport mode access switchport access vlan 56 spanning-tree portfast ! interface GigabitEthernet0/15 description to pod 7 AP switchport mode access switchport access vlan 57 spanning-tree portfast ! interface GigabitEthernet0/16 description to pod 8 AP switchport mode access switchport access vlan 58 spanning-tree portfast ! interface GigabitEthernet0/17 ! interface GigabitEthernet0/18 ! interface GigabitEthernet0/19 ! interface GigabitEthernet0/20 ! interface GigabitEthernet0/21 description to class 4402 controller switchport trunk encapsulation dot1q switchport mode trunk mls qos trust cos ! interface GigabitEthernet0/22 description to class 1252 AP mls qos trust dscp ! interface GigabitEthernet0/23 description to class main server ! interface GigabitEthernet0/24 description to cucme switchport mode access switchport access vlan 60 ! interface GigabitEthernet0/25 ! interface GigabitEthernet0/26 ! interface GigabitEthernet0/27 ! interface GigabitEthernet0/28 ! interface TenGigabitEthernet0/1 ! interface TenGigabitEthernet0/2 ! vlan 60 name vlan60 interface Vlan1 ip address 10.10.50.1 255.255.255.0 ! interface Vlan51 ip address 10.10.51.1 255.255.255.0 ! interface Vlan52 ip address 10.10.52.1 255.255.255.0 ! interface Vlan53 ip address 10.10.53.1 255.255.255.0


! interface Vlan54 ip address 10.10.54.1 255.255.255.0 ! interface Vlan55 ip address 10.10.55.1 255.255.255.0 ! interface Vlan56 ip address 10.10.56.1 255.255.255.0 ! interface Vlan57 ip address 10.10.57.1 255.255.255.0 ! interface Vlan58 ip address 10.10.58.1 255.255.255.0 ! interface Vlan60 ip address 10.10.60.1 255.255.255.0 ! ip classless ip http server ip routing ! ! control-plane ! ! line con 0 line vty 0 4 password cisco login line vty 5 15 login ! end

Lab 3-4 Answer Key: Configuring the Infrastructure End-to-End for VoWLAN

When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

Switch configuration: (Cisco Controller) >show running-config 802.11a cac voice acm enable 802.11a cac voice tspec-inactivity-timeout ignore 802.11a cac video tspec-inactivity-timeout ignore 802.11a cac voice load-based enable 802.11a cac voice stream-size 84000 max-streams 2 802.11a tsm enable 802.11b cac voice acm enable 802.11b cac voice tspec-inactivity-timeout ignore 802.11b cac video tspec-inactivity-timeout ignore 802.11b cac voice load-based enable 802.11b cac voice stream-size 84000 max-streams 2 802.11b tsm enable aaa auth mgmt local radius advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 sta_tx_pwr 0 0 0 advanced 802.11b tx-power-control-thresh -65 Location Summary Algorithm used: Average Client RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db


Calibrating Client RSSI expiry timeout: 5 sec Half life: 0 sec Rogue AP RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db RFID Tag RSSI expiry timeout: 5 sec Half life: 0 sec Notify Threshold: 0 db location rssi-half-life tags 0 location rssi-half-life client 0 location rssi-half-life rogue-aps 0 location expiry tags 5 location expiry client 5 location expiry calibrating-client 5 location expiry rogue-aps 5 advanced eap identity-request-timeout 20 advanced eap request-timeout 20 Cisco Public Safety is not allowed to set in this domain ap syslog host global 255.255.255.255 country US,FR,DE,CN local-auth eap-profile add LEAP2 local-auth eap-profile cert-issuer cisco LEAP2 local-auth eap-profile method add leap LEAP2 local-auth method fast authority-id abc20000000000000000000000000000 "IUWVN Pod 2" local-auth method fast pac-ttl 40 local-auth method fast server-key 12 interface create cucme 0 interface address ap-manager 10.10.50.11 255.255.255.0 10.10.50.1 interface address dynamic-interface cucme 10.10.60.22 255.255.255.0 10.10.60.1 interface address management 10.10.50.10 255.255.255.0 10.10.50.1 interface address virtual 1.1.1.1 interface dhcp ap-manager primary 10.10.50.11 interface dhcp management primary 10.10.50.10 interface port ap-manager 1 interface port cucme 1 interface port management 1 load-balancing window 5 logging buffered 5 logging console 5 logging procinfo disable logging traceinfo disable emergencies mesh security eap mgmtuser add admin55 **** read-write mobility group domain training2 mobility dscp 0 netuser add student2 **** wlan 2 userType permanent description Pod 2 user netuser wlan-id student2 2 network webmode enable network telnet enable network multicast mode multicast 0.0.0.0 network mgmt-via-wireless enable network mgmt-via-dynamic-interface enable network ap-priority disabled network otap-mode disable network rf-network-name training2 qos average-realtime-rate platinum 50 qos burst-realtime-rate platinum 50 radius auth add 1 10.10.50.5 1812 ascii **** radius auth rfc3576 enable 1 radius auth rfc3576 enable 2 radius fallback-test mode off radius fallback-test username radius fallback-test interval 0


rogue ap ssid alarm rogue ap valid-client alarm rogue adhoc enable rogue adhoc alert rogue ap rldp disable sessions timeout 0 snmp version v2c enable snmp version v3 enable sysname sw2 trapflags 802.11-Security ids-sig-attack disable wlan create 1 cisco cisco wlan create 2 LEAP2 iuwvn12 wlan create 3 Roaming Roam12 wlan nac disable 1 wlan nac disable 2 wlan nac disable 3 wlan local-auth enable LEAP2 2 wlan qos 2 platinum wlan qos 3 platinum wlan session-timeout 1 1800 wlan session-timeout 2 1800 wlan session-timeout 3 1800 wlan wmm allow 1 wlan wmm require 2 wlan wmm allow 3 wlan security wpa disable 1 wlan radius_server auth add 3 1 wlan security static-wep-key encryption 2 104 <mode unknown> <passwd hidden> 1 wlan security static-wep-key encryption 3 104 <mode unknown> <passwd hidden> 1 wlan security wpa akm 802.1x disable 7 wlan security wpa akm ft reassociation-time 20 1 wlan security wpa akm ft over-the-air enable 1 wlan security wpa akm ft over-the-ds enable 1 wlan security wpa akm ft reassociation-time 20 2 wlan security wpa akm ft over-the-air enable 2 wlan security wpa akm ft over-the-ds enable 2 wlan security wpa akm ft reassociation-time 20 3 wlan security wpa akm ft over-the-air enable 3 wlan security wpa akm ft over-the-ds enable 3 wlan security wpa wpa1 ciphers tkip enable 2 wlan security wpa wpa1 ciphers tkip enable 3 wlan enable 1 wlan enable 2 wlan enable 3 (Cisco Controller) >

Lab 4-1 Answer Key: Configuring the Wireless Network for Multicast

When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

802.11a cac voice acm enable 802.11a cac video acm enable 802.11a cac voice tspec-inactivity-timeout ignore 802.11a cac video tspec-inactivity-timeout ignore 802.11a cac voice load-based enable 802.11a cac voice stream-size 84000 max-streams 2 802.11a exp-bwreq enable 802.11a dtpc disable 802.11a tsm enable 802.11b cac voice acm enable 802.11b cac video acm enable 802.11b cac voice tspec-inactivity-timeout ignore 802.11b cac video tspec-inactivity-timeout ignore 802.11b cac voice load-based enable


802.11b cac voice stream-size 84000 max-streams 2 802.11b dtpc disable 802.11b preamble long 802.11b rate Supported 2 802.11b rate Supported 5.5 802.11b rate Supported 11 802.11b tsm enable aaa auth mgmt local radius advanced 802.11a channel load enable advanced 802.11a channel add 100 advanced 802.11a channel add 104 advanced 802.11a channel add 108 advanced 802.11a channel add 112 advanced 802.11a channel add 116 advanced 802.11a channel add 120 advanced 802.11a channel add 124 advanced 802.11a channel add 128 advanced 802.11a channel add 132 advanced 802.11a channel add 136 advanced 802.11a channel add 140 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0 advanced 802.11a monitor Channel-list all advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel load enable advanced 802.11b tx-power-control-thresh -65 advanced 802.11b monitor Channel-list all location rssi-half-life tags 0 location rssi-half-life client 0 location rssi-half-life rogue-aps 0 location expiry tags 5 location expiry client 5 location expiry calibrating-client 5 location expiry rogue-aps 5 advanced eap identity-request-timeout 20 advanced eap request-timeout 20 Cisco Public Safety is not allowed to set in this domain ap syslog host global 255.255.255.255 country US,FR,DE,CN custom-web redirectUrl "hello" custom-web weblogo disble local-auth eap-profile add LEAP2 local-auth eap-profile cert-issuer cisco LEAP2 local-auth eap-profile method add leap LEAP2 local-auth method fast authority-id abc20000000000000000000000000000 "IUWVN Pod 2" local-auth method fast pac-ttl 40 local-auth method fast server-key 736563726574 interface create ccm 0 interface create cucme 50 interface address ap-manager 10.10.50.11 255.255.255.0 10.10.50.1 interface address dynamic-interface cucme 10.10.60.22 255.255.255.0 10.10.60.1 interface address management 10.10.50.10 255.255.255.0 10.10.50.1 interface address virtual 1.1.1.1


interface dhcp ap-manager primary 10.10.50.11 interface dhcp management primary 10.10.50.10 interface dhcp dynamic-interface cucme primary 10.10.50.1 interface vlan cucme 50 interface port ap-manager 1 interface port ccm 2 interface port cucme 1 interface port management 1 load-balancing window 5 apgroup add Building1 Group for APs in Building 1 apgroup add Building2 Group for APs in Building 2 apgroup add default-group apgroup interface-mapping add Building1 1 ccm apgroup interface-mapping add Building1 2 cucme apgroup interface-mapping add Building1 3 cucme apgroup interface-mapping add Building1 6 management apgroup interface-mapping add Building1 7 management apgroup interface-mapping add Building2 1 management apgroup interface-mapping add Building2 2 cucme apgroup interface-mapping add Building2 3 cucme apgroup interface-mapping add Building2 6 management apgroup interface-mapping add Building2 7 management apgroup interface-mapping add default-group 1 management apgroup interface-mapping add default-group 2 cucme apgroup interface-mapping add default-group 3 cucme apgroup interface-mapping add default-group 6 management apgroup interface-mapping add default-group 7 management wlan apgroup nac disable Building1 1 wlan apgroup nac disable Building1 2 wlan apgroup nac disable Building1 3 wlan apgroup nac disable Building1 6 wlan apgroup nac disable Building1 7 wlan apgroup nac disable Building2 1 wlan apgroup nac disable Building2 2 wlan apgroup nac disable Building2 3 wlan apgroup nac disable Building2 6 wlan apgroup nac disable Building2 7 wlan apgroup nac disable default-group 1 wlan apgroup nac disable default-group 2 wlan apgroup nac disable default-group 3 wlan apgroup nac disable default-group 6 wlan apgroup nac disable default-group 7 logging buffered 5 logging console 5 logging procinfo disable msglog level warning memory monitor error disable memory monitor leak thresholds 10000 30000 mesh security rad-mac-filter disable mesh security rad-mac-filter disable mesh security eap mgmtuser add admin2 **** read-write mobility group domain training2 mobility dscp 0 netuser add student2 **** wlan 2 userType permanent description Pod 2 user netuser wlan-id student2 2 netuser guest-role create pod2 netuser guest-role qos data-rate average-data-rate pod2 50 netuser guest-role qos data-rate burst-data-rate pod2 50 netuser guest-role qos data-rate average-realtime-rate pod2 50 netuser guest-role qos data-rate burst-realtime-rate pod2 50 network webmode enable network telnet enable network multicast global enable network multicast mode multicast 239.255.2.2 network mgmt-via-wireless enable network mgmt-via-dynamic-interface enable network ap-priority disabled


network otap-mode disable network rf-network-name training2 qos average-data-rate silver 1000 qos burst-data-rate silver 1100 qos average-realtime-rate silver 1000 qos average-realtime-rate platinum 50 qos burst-realtime-rate silver 1100 qos burst-realtime-rate platinum 50 qos protocol-type silver dot1p qos dot1p-tag silver 3 radius fallback-test mode off radius fallback-test username cisco-probe radius fallback-test interval 300 rogue ap ssid alarm rogue ap valid-client alarm rogue adhoc enable rogue adhoc alert rogue ap rldp disable sessions timeout 0 snmp version v2c enable snmp version v3 enable snmp trapreceiver create 172.29.129.160 172.29.129.160 snmp trapreceiver create 127.0.0.1 127.0.0.1 snmp trapreceiver mode enable 172.29.129.160 snmp trapreceiver mode enable 127.0.0.1 sysname sw2 trapflags 802.11-Security ids-sig-attack disable trapflags mesh excessive hop count disable trapflags mesh sec backhaul change disable wlan create 1 cisco cisco wlan create 2 Webauth IUWVN_WEBAUTH wlan create 3 vowlan2 vowlan2 wlan create 6 IUWVN_WEP IUWVN_WEP wlan create 7 IUWVN_WPA IUWVN_WPA wlan nac disable 1 wlan nac disable 2 wlan nac disable 3 wlan nac disable 6 wlan nac disable 7 wlan 7920-support ap-cac-limit enable 1 wlan interface 2 cucme wlan interface 3 cucme wlan custom-web global enable 2 wlan mfp infrastructure protection disable 3 wlan qos 2 platinum wlan qos 3 platinum wlan qos 6 platinum wlan radio 2 802.11bg wlan radio 3 802.11a wlan session-timeout 1 disable wlan session-timeout 2 disable wlan session-timeout 3 disable wlan session-timeout 6 disable wlan session-timeout 7 disable wlan h-reap learn-ipaddr 1 enable wlan h-reap learn-ipaddr 2 enable wlan h-reap learn-ipaddr 3 enable wlan h-reap learn-ipaddr 6 enable wlan h-reap learn-ipaddr 7 enable wlan wmm allow 1 wlan wmm allow 2 wlan wmm allow 3 wlan wmm allow 6 wlan wmm allow 7 wlan security wpa disable 1 wlan security wpa disable 2 wlan security wpa disable 3 wlan security wpa disable 6


wlan security static-wep-key enable 6 wlan security static-wep-key encryption 6 40 <mode unknown> <passwd hidden> 1 wlan security web-auth enable 2 wlan security wpa akm 802.1x disable 1 wlan security wpa akm 802.1x disable 2 wlan security wpa akm 802.1x disable 3 wlan security wpa akm 802.1x disable 6 wlan security wpa akm 802.1x disable 7 wlan security wpa akm psk enable 7 wlan security wpa akm ft reassociation-time 20 1 wlan security wpa akm ft over-the-air enable 1 wlan security wpa akm ft over-the-ds enable 1 wlan security wpa akm ft reassociation-time 20 2 wlan security wpa akm ft over-the-air enable 2 wlan security wpa akm ft over-the-ds enable 2 wlan security wpa akm ft reassociation-time 20 3 wlan security wpa akm ft over-the-air enable 3 wlan security wpa akm ft over-the-ds enable 3 wlan security wpa akm ft reassociation-time 20 6 wlan security wpa akm ft over-the-air enable 6 wlan security wpa akm ft over-the-ds enable 6 wlan security wpa akm ft reassociation-time 20 7 wlan security wpa akm ft over-the-air enable 7 wlan security wpa akm ft over-the-ds enable 7 wlan security wpa wpa1 enable 7 wlan security wpa wpa1 ciphers tkip enable 7 wlan security wpa wpa2 disable 7 wlan security wpa wpa2 ciphers aes disable 7 wlan enable 1 wlan enable 2 wlan enable 3 license agent default authenticate none

Step 2, Task 35: Data rate should be 24 Mb/s, which is the highest mandatory data rate configured on your controller.

Lab 5-1 Answer Key: Creating a Video WLAN When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

802.11a cac voice acm enable 802.11a cac video acm enable 802.11a cac voice max-bandwidth 40 802.11a cac video max-bandwidth 40 802.11a cac video roam-bandwidth 5 802.11a cac voice tspec-inactivity-timeout ignore 802.11a cac video tspec-inactivity-timeout ignore 802.11a cac voice load-based enable 802.11a cac voice stream-size 84000 max-streams 2 802.11a exp-bwreq enable 802.11a dtpc disable 802.11a tsm enable 802.11b 11nSupport a-msdu tx disable 802.11b 11nSupport rifs tx disable 802.11b cac voice acm enable 802.11b cac video acm enable 802.11b cac voice max-bandwidth 40 802.11b cac video max-bandwidth 40 802.11b cac video roam-bandwidth 25 802.11b cac voice tspec-inactivity-timeout ignore 802.11b cac video tspec-inactivity-timeout ignore 802.11b cac voice load-based enable 802.11b cac voice stream-size 84000 max-streams 2 802.11b dtpc disable 802.11b preamble long


802.11b rate Supported 2 802.11b rate Supported 5.5 802.11b rate Supported 11 802.11b tsm enable aaa auth mgmt local radius advanced 802.11a channel load enable advanced 802.11a channel add 100 advanced 802.11a channel add 104 advanced 802.11a channel add 108 advanced 802.11a channel add 112 advanced 802.11a channel add 116 advanced 802.11a channel add 120 advanced 802.11a channel add 124 advanced 802.11a channel add 128 advanced 802.11a channel add 132 advanced 802.11a channel add 136 advanced 802.11a channel add 140 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0 advanced 802.11a monitor Channel-list all advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel load enable advanced 802.11b tx-power-control-thresh -65 advanced 802.11b monitor Channel-list all location rssi-half-life tags 0 location rssi-half-life client 0 location rssi-half-life rogue-aps 0 location expiry tags 5 location expiry client 5 location expiry calibrating-client 5 location expiry rogue-aps 5 advanced eap identity-request-timeout 20 advanced eap request-timeout 20 Cisco Public Safety is not allowed to set in this domain ap syslog host global 255.255.255.255 country US,FR,DE,CN custom-web redirectUrl "hello" custom-web weblogo disble dhcp create-scope cucme dhcp address-pool cucme 10.10.60.100 10.10.60.120 dhcp default-router cucme 10.10.60.1 dhcp enable cucme dhcp network cucme 10.10.60.0 255.255.255.0 local-auth eap-profile add LEAP2 local-auth eap-profile cert-issuer cisco LEAP2 local-auth eap-profile method add leap LEAP2 local-auth method fast authority-id abc20000000000000000000000000000 "IUWVN Pod 2" local-auth method fast pac-ttl 40 local-auth method fast server-key 736563726574 interface create ccm 0 interface create cucme 50 interface address ap-manager 10.10.50.22 255.255.255.0 10.10.50.1 interface address dynamic-interface cucme 10.10.60.22 255.255.255.0 10.10.60.1


interface address management 10.10.50.20 255.255.255.0 10.10.50.1 interface address virtual 1.1.1.1 interface dhcp ap-manager primary 10.10.50.1 interface dhcp dynamic-interface cucme primary 10.10.60.1 interface dhcp management primary 10.10.50.1 interface vlan cucme 60 interface port ap-manager 1 interface port cucme 1 interface port management 1 load-balancing window 5 apgroup add Building1 Group for APs in Building 1 apgroup add Building2 Group for APs in Building 2 apgroup add default-group apgroup interface-mapping add Building1 2 cucme apgroup interface-mapping add Building1 3 cucme apgroup interface-mapping add Building1 6 management apgroup interface-mapping add Building1 7 management apgroup interface-mapping add Building2 2 cucme apgroup interface-mapping add Building2 3 cucme apgroup interface-mapping add Building2 6 management apgroup interface-mapping add Building2 7 management apgroup interface-mapping add default-group 2 cucme apgroup interface-mapping add default-group 3 cucme apgroup interface-mapping add default-group 6 management apgroup interface-mapping add default-group 7 management wlan apgroup nac disable Building1 2 wlan apgroup nac disable Building1 3 wlan apgroup nac disable Building1 6 wlan apgroup nac disable Building1 7 wlan apgroup nac disable Building2 2 wlan apgroup nac disable Building2 3 wlan apgroup nac disable Building2 6 wlan apgroup nac disable Building2 7 wlan apgroup nac disable default-group 2 wlan apgroup nac disable default-group 3 wlan apgroup nac disable default-group 6 wlan apgroup nac disable default-group 7 logging buffered 5 logging console 5 logging procinfo disable msglog level warning memory monitor error disable memory monitor leak thresholds 10000 30000 mesh security rad-mac-filter disable mesh security rad-mac-filter disable mesh security eap mgmtuser add admin2 **** read-write mobility group domain training2 mobility dscp 0 netuser add student2 **** wlan 2 userType permanent description Pod 2 user netuser wlan-id student2 2 netuser guest-role create pod2 netuser guest-role qos data-rate average-data-rate pod2 50 netuser guest-role qos data-rate burst-data-rate pod2 50 netuser guest-role qos data-rate average-realtime-rate pod2 50 netuser guest-role qos data-rate burst-realtime-rate pod2 50 network webmode enable network telnet enable network multicast global enable network multicast mode multicast 239.22.22.22 network mgmt-via-wireless enable network mgmt-via-dynamic-interface enable network ap-priority disabled network otap-mode disable network rf-network-name training2 qos average-data-rate silver 1000 qos burst-data-rate silver 1100 qos average-realtime-rate silver 1000


qos average-realtime-rate platinum 50 qos burst-realtime-rate silver 1100 qos burst-realtime-rate platinum 50 qos protocol-type silver dot1p qos dot1p-tag silver 3 radius fallback-test mode off radius fallback-test username cisco-probe radius fallback-test interval 300 rogue ap ssid alarm rogue ap valid-client alarm rogue adhoc enable rogue adhoc alert rogue ap rldp disable sessions timeout 0 snmp version v2c enable snmp version v3 enable sysname sw2 trapflags 802.11-Security ids-sig-attack disable trapflags mesh excessive hop count disable trapflags mesh sec backhaul change disable wlan create 2 Webauth IUWVN_WEBAUTH wlan create 3 vowlan2 vowlan2 wlan create 6 IUWVN_WEP IUWVN_WEP wlan create 7 IUWVN_WPA IUWVN_WPA wlan nac disable 2 wlan nac disable 3 wlan nac disable 6 wlan nac disable 7 wlan interface 2 cucme wlan interface 3 cucme wlan custom-web global enable 2 wlan mfp infrastructure protection disable 3 wlan qos 2 platinum wlan qos 3 platinum wlan qos 6 platinum wlan radio 2 802.11bg wlan radio 3 802.11bg wlan session-timeout 2 disable wlan session-timeout 3 disable wlan session-timeout 6 disable wlan session-timeout 7 disable wlan h-reap learn-ipaddr 2 enable wlan h-reap learn-ipaddr 3 enable wlan h-reap learn-ipaddr 6 enable wlan h-reap learn-ipaddr 7 enable wlan wmm allow 2 wlan wmm allow 3 wlan wmm allow 6 wlan wmm allow 7 wlan security wpa disable 2 wlan security wpa disable 3 wlan security wpa disable 6 wlan security static-wep-key enable 6 wlan security static-wep-key encryption 6 40 <mode unknown> <passwd hidden> 1 wlan security web-auth enable 2 wlan security wpa akm 802.1x disable 2 wlan security wpa akm 802.1x disable 3 wlan security wpa akm 802.1x disable 6 wlan security wpa akm 802.1x disable 7 wlan security wpa akm psk enable 7 wlan security wpa akm ft reassociation-time 20 2 wlan security wpa akm ft over-the-air enable 2 wlan security wpa akm ft over-the-ds enable 2 wlan security wpa akm ft reassociation-time 20 3 wlan security wpa akm ft over-the-air enable 3 wlan security wpa akm ft over-the-ds enable 3 wlan security wpa akm ft reassociation-time 20 6 wlan security wpa akm ft over-the-air enable 6


wlan security wpa akm ft over-the-ds enable 6 wlan security wpa akm ft reassociation-time 20 7 wlan security wpa akm ft over-the-air enable 7 wlan security wpa akm ft over-the-ds enable 7 wlan security wpa wpa1 enable 7 wlan security wpa wpa1 ciphers tkip enable 7 wlan security wpa wpa2 disable 7 wlan security wpa wpa2 ciphers aes disable 7 wlan enable 2 wlan enable 3 license agent default authenticate none

Lab 5-2 Answer Key: Video WLAN and Multicast When you complete this activity, your phone configuration will be similar to the results here, with differences that are specific to your device or workgroup:

802.11a cac voice acm enable 802.11a cac video acm enable 802.11a cac voice max-bandwidth 40 802.11a cac video max-bandwidth 40 802.11a cac video roam-bandwidth 5 802.11a cac voice tspec-inactivity-timeout ignore 802.11a cac video tspec-inactivity-timeout ignore 802.11a cac voice load-based enable 802.11a cac voice stream-size 84000 max-streams 2 802.11a exp-bwreq enable 802.11a dtpc disable 802.11a tsm enable 802.11b 11nSupport a-msdu tx disable 802.11b 11nSupport rifs tx disable 802.11b cac voice acm enable 802.11b cac video acm enable 802.11b cac voice max-bandwidth 40 802.11b cac video max-bandwidth 40 802.11b cac video roam-bandwidth 25 802.11b cac voice tspec-inactivity-timeout ignore 802.11b cac video tspec-inactivity-timeout ignore 802.11b cac voice load-based enable 802.11b cac voice stream-size 84000 max-streams 2 802.11b dtpc disable 802.11b preamble long 802.11b rate Supported 2 802.11b rate Supported 5.5 802.11b rate Supported 11 802.11b tsm enable aaa auth mgmt local radius advanced 802.11a channel load enable advanced 802.11a channel add 100 advanced 802.11a channel add 104 advanced 802.11a channel add 108 advanced 802.11a channel add 112 advanced 802.11a channel add 116 advanced 802.11a channel add 120 advanced 802.11a channel add 124 advanced 802.11a channel add 128 advanced 802.11a channel add 132 advanced 802.11a channel add 136 advanced 802.11a channel add 140 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0


advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a channel add 0 advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0 advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0 advanced 802.11a monitor Channel-list all advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel add 0 advanced 802.11b channel load enable advanced 802.11b tx-power-control-thresh -65 advanced 802.11b monitor Channel-list all location rssi-half-life tags 0 location rssi-half-life client 0 location rssi-half-life rogue-aps 0 location expiry tags 5 location expiry client 5 location expiry calibrating-client 5 location expiry rogue-aps 5 advanced eap identity-request-timeout 20 advanced eap request-timeout 20 Cisco Public Safety is not allowed to set in this domain ap syslog host global 255.255.255.255 country US,FR,DE,CN custom-web redirectUrl "hello" custom-web weblogo disble dhcp create-scope cucme dhcp address-pool cucme 10.10.60.100 10.10.60.120 dhcp default-router cucme 10.10.60.1 dhcp enable cucme dhcp network cucme 10.10.60.0 255.255.255.0 local-auth eap-profile add LEAP2 local-auth eap-profile cert-issuer cisco LEAP2 local-auth eap-profile method add leap LEAP2 local-auth method fast authority-id abc20000000000000000000000000000 "IUWVN Pod 2" local-auth method fast pac-ttl 40 local-auth method fast server-key 736563726574 interface create ccm 0 interface create cucme 50 interface address ap-manager 10.10.50.22 255.255.255.0 10.10.50.1 interface address dynamic-interface cucme 10.10.60.22 255.255.255.0 10.10.60.1 interface address management 10.10.50.20 255.255.255.0 10.10.50.1 interface address virtual 1.1.1.1 interface dhcp ap-manager primary 10.10.50.1 interface dhcp dynamic-interface cucme primary 10.10.60.1 interface dhcp management primary 10.10.50.1 interface vlan cucme 60 interface port ap-manager 1 interface port cucme 1 interface port management 1 load-balancing window 5 apgroup add Building1 Group for APs in Building 1 apgroup add Building2 Group for APs in Building 2 apgroup add default-group apgroup interface-mapping add Building1 2 cucme apgroup interface-mapping add Building1 3 cucme apgroup interface-mapping add Building1 6 management apgroup interface-mapping add Building1 7 management apgroup interface-mapping add Building2 2 cucme apgroup interface-mapping add Building2 3 cucme apgroup interface-mapping add Building2 6 management apgroup interface-mapping add Building2 7 management apgroup interface-mapping add default-group 2 cucme apgroup interface-mapping add default-group 3 cucme apgroup interface-mapping add default-group 6 management


apgroup interface-mapping add default-group 7 management wlan apgroup nac disable Building1 2 wlan apgroup nac disable Building1 3 wlan apgroup nac disable Building1 6 wlan apgroup nac disable Building1 7 wlan apgroup nac disable Building2 2 wlan apgroup nac disable Building2 3 wlan apgroup nac disable Building2 6 wlan apgroup nac disable Building2 7 wlan apgroup nac disable default-group 2 wlan apgroup nac disable default-group 3 wlan apgroup nac disable default-group 6 wlan apgroup nac disable default-group 7 logging buffered 5 logging console 5 logging procinfo disable msglog level warning memory monitor error disable memory monitor leak thresholds 10000 30000 mesh security rad-mac-filter disable mesh security rad-mac-filter disable mesh security eap mgmtuser add admin2 **** read-write mobility group domain training2 mobility dscp 0 netuser add student2 **** wlan 2 userType permanent description Pod 2 user netuser wlan-id student2 2 netuser guest-role create pod2 netuser guest-role qos data-rate average-data-rate pod2 50 netuser guest-role qos data-rate burst-data-rate pod2 50 netuser guest-role qos data-rate average-realtime-rate pod2 50 netuser guest-role qos data-rate burst-realtime-rate pod2 50 network webmode enable network telnet enable network multicast global enable network multicast mode multicast 239.22.22.22 network mgmt-via-wireless enable network mgmt-via-dynamic-interface enable network ap-priority disabled network otap-mode disable network rf-network-name training2 qos average-data-rate silver 1000 qos burst-data-rate silver 1100 qos average-realtime-rate silver 1000 qos average-realtime-rate platinum 50 qos burst-realtime-rate silver 1100 qos burst-realtime-rate platinum 50 qos protocol-type silver dot1p qos dot1p-tag silver 3 radius fallback-test mode off radius fallback-test username cisco-probe radius fallback-test interval 300 rogue ap ssid alarm rogue ap valid-client alarm rogue adhoc enable rogue adhoc alert rogue ap rldp disable sessions timeout 0 snmp version v2c enable snmp version v3 enable sysname sw2 trapflags 802.11-Security ids-sig-attack disable trapflags mesh excessive hop count disable trapflags mesh sec backhaul change disable wlan create 2 Webauth IUWVN_WEBAUTH wlan create 3 vowlan2 vowlan2 wlan create 6 IUWVN_WEP IUWVN_WEP wlan create 7 IUWVN_WPA IUWVN_WPA


wlan nac disable 2 wlan nac disable 3 wlan nac disable 6 wlan nac disable 7 wlan interface 2 cucme wlan interface 3 cucme wlan custom-web global enable 2 wlan mfp infrastructure protection disable 3 wlan qos 2 platinum wlan qos 3 platinum wlan qos 6 platinum wlan radio 2 802.11bg wlan radio 3 802.11bg wlan session-timeout 2 disable wlan session-timeout 3 disable wlan session-timeout 6 disable wlan session-timeout 7 disable wlan h-reap learn-ipaddr 2 enable wlan h-reap learn-ipaddr 3 enable wlan h-reap learn-ipaddr 6 enable wlan h-reap learn-ipaddr 7 enable wlan wmm allow 2 wlan wmm allow 3 wlan wmm allow 6 wlan wmm allow 7 wlan security wpa disable 2 wlan security wpa disable 3 wlan security wpa disable 6 wlan security static-wep-key enable 6 wlan security static-wep-key encryption 6 40 <mode unknown> <passwd hidden> 1 wlan security web-auth enable 2 wlan security wpa akm 802.1x disable 2 wlan security wpa akm 802.1x disable 3 wlan security wpa akm 802.1x disable 6 wlan security wpa akm 802.1x disable 7 wlan security wpa akm psk enable 7 wlan security wpa akm ft reassociation-time 20 2 wlan security wpa akm ft over-the-air enable 2 wlan security wpa akm ft over-the-ds enable 2 wlan security wpa akm ft reassociation-time 20 3 wlan security wpa akm ft over-the-air enable 3 wlan security wpa akm ft over-the-ds enable 3 wlan security wpa akm ft reassociation-time 20 6 wlan security wpa akm ft over-the-air enable 6 wlan security wpa akm ft over-the-ds enable 6 wlan security wpa akm ft reassociation-time 20 7 wlan security wpa akm ft over-the-air enable 7 wlan security wpa akm ft over-the-ds enable 7 wlan security wpa wpa1 enable 7 wlan security wpa wpa1 ciphers tkip enable 7 wlan security wpa wpa2 disable 7 wlan security wpa wpa2 ciphers aes disable 7 wlan enable 2 wlan enable 3 license agent default authenticate none


Teardown and Restoration This topic describes how to tear down and restore the equipment that is used in the course.

Step 1 Leave the Aironet 1252 Series Access Points with their current configuration (AP name).

Step 2 Clear the configuration of the controllers (pods and class) and then refer to the class setup to configure the class controller and pod controllers for the next class.

Step 3 Clear the Cisco Unified Communications Manager Express configuration, reboot the appliance, and then reimport the Cisco Unified Communications Manager Express configuration file as per the class setup instructions for the next class.

Step 4 Erase the class switch configuration, reboot the switch, and then reimport the class switch configuration as per the class setup instructions.

Step 5 Uninstall Cisco WCS and reinstall it as per the class setup instructions.

Step 6 Delete the Cisco Secure ACS users and clients created during the class.

Step 7 Leave the phones with their current configuration, because they are reset to factory default at the beginning of each class.

Step 8 Leave the laptops with their configuration.

You can find the IUWVN_switch.txt configuration file for the class switch in the Instructor material. It contains the following configuration:

!

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname IUWVN_switch

!

enable password cisco

!

no aaa new-model

system mtu routing 1500

ip subnet-zero


no ip domain-lookup

ip dhcp excluded-address 10.10.50.1 10.10.50.100










!

ip dhcp pool cucme

network 10.10.60.0 255.255.255.0

default-router 10.10.60.1

option 150 ip 10.10.60.60

!

ip dhcp pool backbone

network 10.10.50.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod1

network 10.10.51.0 255.255.255.0


option 150 ip 10.10.60.60

!


ip dhcp pool pod2

network 10.10.52.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod3

network 10.10.53.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod4

network 10.10.54.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod5

network 10.10.55.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod6

network 10.10.56.0 255.255.255.0


option 150 ip 10.10.60.60

!

ip dhcp pool pod7

network 10.10.57.0 255.255.255.0



option 150 ip 10.10.60.60

!

ip dhcp pool pod8

network 10.10.58.0 255.255.255.0


option 150 ip 10.10.60.60

!

!

mls qos

mls qos map cos-dscp 0 8 16 24 34 46 48 56

!

!

no file verify auto

spanning-tree mode pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

interface FastEthernet0

no ip address

shutdown

!

interface GigabitEthernet0/1

description to pod 1 WLC2106

switchport trunk encapsulation dot1q

switchport mode trunk

!






!





!





!





!





!






!





!


description to pod 1 1252AP

switchport mode access

switchport access vlan 51

spanning-tree portfast

!






!






!







!






!






!






!






!


description Open for wired PC access if needed




!


description Open for wired PC access if needed



!


description to instructor IP phone




srr-queue bandwidth share 1 5 25 75

srr-queue bandwidth shape 30 0 0 0

priority-queue out

!


description to Backbone 1252 AP




mls qos trust dscp



priority-queue out

!



description to Backbone ACS server




!


description to Backbone WCS server




!


description to Backbone WLC4402



mls qos trust cos



priority-queue out

!


description to CUCME



!


!



!


!


!

interface TenGigabitEthernet0/1

!

interface TenGigabitEthernet0/2

!

vlan 60

name vlan60

!

vlan 50-58

!

interface Vlan50

ip address 10.10.50.1 255.255.255.0

!

interface Vlan51

ip address 10.10.51.1 255.255.255.0

!

interface Vlan52

ip address 10.10.52.1 255.255.255.0

!

interface Vlan53

ip address 10.10.53.1 255.255.255.0

!

interface Vlan54


ip address 10.10.54.1 255.255.255.0

!

interface Vlan55

ip address 10.10.55.1 255.255.255.0

!

interface Vlan56

ip address 10.10.56.1 255.255.255.0

!

interface Vlan57

ip address 10.10.57.1 255.255.255.0

!

interface Vlan58

ip address 10.10.58.1 255.255.255.0

!

interface Vlan60

ip address 10.10.60.1 255.255.255.0

!

ip classless

ip http server

ip routing

!

!

control-plane

!

!

line con 0

line vty 0 4

password cisco


login

line vty 5 15

login

!

end

You can find the cucme_config.txt file in the Instructor material. It contains the following configuration:

Current configuration : 7102 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname cucme

!

boot-start-marker

boot system flash c2800nm-spservicesk9-mz.124-20.T1.bin

boot-end-marker

!

logging message-counter syslog

logging buffered 51200 warnings

!

no aaa new-model

!

dot11 syslog

ip source-route


!

!

ip cef

!

!

ip domain name cisco.com

multilink bundle-name authenticated

!

!

voice-card 0

no dspfarm

!

!

!

!

username admin privilege 15 password 0 cisco

username student privilege 15 password 0 cisco

archive

log config

hidekeys

!

!

!

!

!

!

interface FastEthernet0/0

description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$


ip address 10.10.60.60 255.255.255.0

duplex auto

speed auto

!

interface FastEthernet0/1

description $ES_LAN$

no ip address

shutdown

duplex auto

speed auto

service-policy output priority

!

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 10.10.60.1

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

!

!

access-list 23 permit 10.10.50.0 0.0.0.255

access-list 23 permit 10.10.60.0 0.0.0.255

!

!

tftp-server phone/7940-7960/P00308000500.loads

tftp-server phone/7940-7960/P00308000500.bin


tftp-server phone/7940-7960/P00308000500.sbn

tftp-server phone/7940-7960/P00308000500.sb2

tftp-server CP7921G-1.2.1/CP7921G-1.2.1.LOADS

tftp-server CP7921G-1.2.1/APPS-1.2.1.SBN

tftp-server CP7921G-1.2.1/GUI-1.2.1.SBN

tftp-server CP7921G-1.2.1/SYS-1.2.1.SBN

tftp-server CP7921G-1.2.1/TNUX-1.2.1.SBN

tftp-server CP7921G-1.2.1/TNUXR-1.2.1.SBN

tftp-server CP7921G-1.2.1/WLAN-1.2.1.SBN

tftp-server phone/7970-7971/apps70.8-3-2-27.sbn

tftp-server phone/7970-7971/cnu70.8-3-2-27.sbn

tftp-server phone/7970-7971/cvm70sccp.8-3-2-27.sbn

tftp-server phone/7970-7971/dsp70.8-3-2-27.sbn

tftp-server phone/7970-7971/jar70sccp.8-3-2-27.sbn

tftp-server phone/7970-7971/SCCP70.8-3-3S.loads

tftp-server phone/7970-7971/term70.default.loads

tftp-server phone/7970-7971/term71.default.loads

!

control-plane

!

!

telephony-service

video

load 7921 CP7921G-1.2.1.LOADS

load 7970 term70.default.loads

max-ephones 18

max-dn 18

ip source-address 10.10.60.60 port 2000


service phone videoCapability 1

max-conferences 8 gain -6

moh music-on-hold.au

multicast moh 239.1.1.1 port 2000

web admin system name admin password cisco

dn-webedit

time-webedit

transfer-system full-consult

create cnf-files version-stamp Jan 01 2002 00:00:00

!

!

!

!

ephone-dn 1

number 1000

!

!

ephone-dn 2

number 1001

!

!

ephone-dn 3

number 1002

!

!

ephone-dn 4

number 1003

!


!

ephone-dn 5

number 1004

!

!

ephone-dn 6

number 1005

!

!

ephone-dn 7

number 1006

!

!

ephone-dn 8

number 1041

!

!

ephone-dn 9

number 1008

!

!

ephone-dn 10

number 1009

!

!

ephone-dn 11

number 1010

!


!

ephone-dn 12

number 1011

!

!

ephone 1

button 1:1

!

!

!

ephone 2

button 1:2

!

!

!

ephone 3

button 1:3

!

!

!

ephone 4

button 1:4

!

!

!

ephone 5

button 1:5

!


!

!

ephone 6

button 1:6

!

!

!

ephone 7

button 1:7

!

!

!

ephone 8

button 1:8

!

!

!

ephone 9

button 1:9

!

!

!

ephone 10

button 1:10

!

!

!

ephone 11


button 1:11

!

!

!

ephone 12

button 1:12

!

!

banner login ^C

-----------------------------------------------------------------------

The Cisco Router and Security Device Manager (Cisco SDM) is installed on this device.

This feature requires the one-time use of the username “cisco.” and the password “cisco.” The default username and password have a privilege level of 15.

Please change these publicly known initial credentials by using Cisco SDM or the Cisco IOS CLI.

Here are the Cisco IOS commands:

username <myuser> privilege 15 secret 0 <mypassword>

no username cisco

Replace <myuser> and <mypassword> with the username and password that you want to use.

For more information about Cisco SDM, please follow the instructions in the “Quick Start

Guide” for your router or go to http://www.cisco.com/go/sdm.

-----------------------------------------------------------------------

^C

!

line con 0


login local

line aux 0

line vty 0 4

access-class 23 in

privilege level 15

login local

transport input telnet ssh

line vty 5 15

access-class 23 in

privilege level 15

login local

transport input telnet ssh

!

scheduler allocate 20000 1000

end

Documents

Implementing Cisco Unified Wireless Voice Networks Course Management Overview The Implementing Cisco Unified Wireless Voice Networks version 1.0 (IUWVN v1.0) course is a five-day instructor-led