Base Config

Hostname <hostname>
Service password-encryption
Username <user> privilege 15 secret <password>
Enable secrect <password>

Note: Username is needed for the GUI login

Setup VTY lines

Line vty 0 50
Login local
Tansport input ssh

Per C9800 – Line VTY Issues you will want the 50 lines.

Configure Vlan for Management

Vlan <vlan-id>
Name <vlan name>

Interface <vlan-id>
Ip address <ip> <subnetmask>
No shutdown

Configure G1 for Management

Interface g1
Switchport mode truck
Switchport trunk allowed vlan <vlan>
Shut
No shut

Ip route 0.0.0.0 0.0.0.0 <next hop>

Country Code

Ap dot11 5ghz shutdown
Y
Ap dot11 24ghz shutdown
Y
Ap country <country code>

No ap dot11 5ghz shutdown
No ap dot11 24ghz shutdown

Wireless Management trust point

Wlc(config)#wireless management trustpoint <name>
Wlc(config)#Wireless management interfave vlan <vlan>
WLC# wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0 <password>

Show wireless management trustpoint
Trustpoint Name  : WLC_WLC_TP
Certificate Info : Available
Certificate Type : SSC
Certificate Hash : xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Private key Info : Available
FIPS suitability : Not Applicable

NTP/DNS

ntp server <ip>
ip name-server <ip>

Related Posts