Using Management Over Wireless

Management over Wireless

The management over wireless feature allows you to monitor and configure local controllers using a wireless client. This feature is supported for all management tasks except uploads to and downloads from (transfers to and from) the controller.

This feature blocks wireless management access to the same controller that the wireless client device is currently associated with. It does not prevent management access for a wireless client associated with another controller entirely. To completely block management access to wireless clients based on VLAN and so on, we recommend that you use access control lists (ACLs) or similar mechanism.

Restrictions on Management over Wireless

  • Management over Wireless can be disabled only if clients are on central switching.

  • Management over Wireless is not supported for FlexConnect local switching clients. However, Management over Wireless works for non-web authentication clients if you have a route to the controller from the FlexConnect site.

This section contains the following subsections:

Enabling Management over Wireless (GUI)

Procedure

Step 1

Choose Management > Mgmt Via Wireless to open the Management Via Wireless page.

Step 2

Check the Enable Controller Management to be accessible from Wireless Clients check box to enable management over wireless for the WLAN or unselect it to disable this feature. By default, it is in disabled state.

Step 3

Save the configuration.

Enabling Management over Wireless (CLI)

Procedure

Step 1

Verify whether the management over wireless interface is enabled or disabled by entering this command:

show network summary

  • If disabled: Enable management over wireless by entering this command: config network mgmt-via-wireless enable
  • Otherwise, use a wireless client to associate with an access point connected to the controller that you want to manage.
Step 2

Log into the CLI to verify that you can manage the WLAN using a wireless client by entering this command:

telnet wlc-ip-addr CLI-command