Base Config
Hostname <hostname>
Service password-encryption
Username <user> privilege 15 secret <password>
Enable secrect <password>
Note: Username is needed for the GUI login
Setup VTY lines
Line vty 0 50
Login local
Tansport input ssh
Per C9800 – Line VTY Issues you will want the 50 lines.
Configure Vlan for Management
Vlan <vlan-id>
Name <vlan name>
Interface <vlan-id>
Ip address <ip> <subnetmask>
No shutdown
Configure G1 for Management
Interface g1
Switchport mode truck
Switchport trunk allowed vlan <vlan>
Shut
No shut
Ip route 0.0.0.0 0.0.0.0 <next hop>
Country Code
Ap dot11 5ghz shutdown
Y
Ap dot11 24ghz shutdown
Y
Ap country <country code>
No ap dot11 5ghz shutdown
No ap dot11 24ghz shutdown
Wireless Management trust point
Wlc(config)#wireless management trustpoint <name>
Wlc(config)#Wireless management interfave vlan <vlan>
WLC# wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0 <password>
Show wireless management trustpoint
Trustpoint Name : WLC_WLC_TP
Certificate Info : Available
Certificate Type : SSC
Certificate Hash : xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Private key Info : Available
FIPS suitability : Not Applicable
NTP/DNS
ntp server <ip>
ip name-server <ip>