Provisioning the AP

You need to configure theVPNVirtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.client settings on the AP to instruct the AP to useIPsecInternet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session.to connect to theManaged Device. You can provision theRemote APRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link.and allow remote users to provision the AP at home. This method of provisioning is referred asZTPZero Touch Provisioning. ZTP is a device provisioning mechanism that allows automatic and quick provisioning of devices with a minimal or at times no manual intervention.. SeeProvisioning 4G USB Modems on Remote Access Pointsfor more information aboutZTPZero Touch Provisioning. ZTP is a device provisioning mechanism that allows automatic and quick provisioning of devices with a minimal or at times no manual intervention.ofremote APRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link..

You must provision the APbefore you install it at its remote location. To provision the AP, the AP must be physically connected to the local network or directly connected to theManaged Device. When connected and powered on, the AP must also be able to obtain an IP address from aDHCPDynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.server on the local network or from theManaged Device.

If your configuration has an internalLMSLocal Management Switch. In multi-controller networks, each controller acts as an LMS and terminates user traffic from the APs, processes, and forwards the traffic to the wired network.IP address,remote APsRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link.may attempt to switch over to theLMSLocal Management Switch. In multi-controller networks, each controller acts as an LMS and terminates user traffic from the APs, processes, and forwards the traffic to the wired network.IP地址,从实习生是不可到达的et. Forremote APsRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link., ensure that theLMSLocal Management Switch. In multi-controller networks, each controller acts as an LMS and terminates user traffic from the APs, processes, and forwards the traffic to the wired network.IP address in the AP system profile for the AP group has an externally routable IP address.

Reprovisioning the AP causes it to automatically reboot. The easiest way to provision an AP is to use the Provisioning page in the WebUI, as described in the following steps:

1.In theManaged Networknode hierarchy, navigate to theConfiguration > Access Points > Remote APstab.

2.Select theremote APRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link.and clickProvision.

3.SelectPre-shared Keyfrom theAuthentication Methodsdrop-down list.

4.Enter theUser name,Password, andConfirm password.

The username and password you enter must match the username and password configured on the authentication server for theremote APRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link..

5.Select theStaticoption in theController Discoveryfield.

6.Set theController IP/DNSname as shown below:

Table 1:Configuring aManaged deviceIP Address

Deployment Scenario	Master IP Address Value
Deployment 1	Managed deviceIP address.
Deployment 2	Managed devicepublic IP address.
Deployment 3	Public address of theNATNetwork Address Translation. NAT is a method of remapping one IP address space into another by modifying network address information in Internet Protocol (IP) datagram packet headers while they are in transit across a traffic routing device.device to which themanaged deviceis connected.

The username and password you enter must match the username and password configured on the authentication server for theremote APRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link..

7.SelectDHCPoption in theIPfield.

8.ClickSubmit.

9.ClickPending Changes.

10.In thePending Changeswindow, select the check box and clickDeploy changes.