## The Importance of Wireless Technology 🌐
**Wireless technology** serves as the backbone of modern converged network systems. Its significance lies in its ability to provide:
* **Mobility:** It allows users to connect to the network and access resources **anywhere** within the coverage area without being restricted by cables. This is essential for flexible work, learning, and entertainment environments.
* **Ease of Deployment & Scalability:** Setting up a wireless network is faster and simpler than a wired one, especially when expanding coverage or adding new devices (as in this lab, where we use **Access Points** to extend VLANs).
* **Cost Efficiency:** It significantly reduces the costs associated with installing, maintaining, and replacing physical cabling infrastructure.
In summary, Wireless is not just a convenience but a **critical factor** in achieving a **flexible, efficient, and highly scalable** network environment.
## 1. Lab Requirements
### 1.1. Configure Converged Network System with VLANs
* **VLAN 10:** `192.168.1.0/24`
* **VLAN 20:** `192.168.2.0/24`
* **VLAN 30:** `192.168.3.0/24`
### 1.2. Access Point (AP) Configuration
* All **Access Points (APs)** must join the **Wireless LAN Controller (WLC)** with IP: `192.168.1.254`.
### 1.3. SSID Configuration
Each AP must broadcast the correct **SSID** according to the schema:
* **"WLAN20"** for **VLAN 20**.
* **"WLAN30"** for **VLAN 30**.
### 1.4. Write Access Control List (ACL) Requirements
| Requirement | Network Segment | Access Rights |
| :--- | :--- | :--- |
| **1.4.1** | `192.168.1.0/24` | **Full Access** (Allowed to access everywhere). |
| **1.4.2** | `192.168.2.0/24` | **Only** allowed to access the **Test Server** (`192.168.1.252`) but **blocked** from accessing the Internet. |
| **1.4.3** | `192.168.3.0/24` | Allowed to access the **Internet** but **blocked** from accessing the Test Server (`192.168.1.252`). |
---
## 2. General Topology
# 4. Configuration
## 4.1. WLC Configuration
### B1: Check the Default IP/Netmask of the WLC
### B2: Connect an Additional PC to the WLC
* The PC accesses the WLC's GUI and configures the WLC via the GUI
### B3: Configure the PC
* The PC must be on the **same network segment** as the WLC's default network.
* The **Gateway** must point to the WLC's IP address.
### B4: Access the WLC Graphical User Interface (GUI) via the WLC's IP
* Access the WLC GUI.
* Create an account.
* Set a password for the account.
### B5: Configure the New Management IP, Configure According to the Topology
* **WLC** belongs to **VLAN 10**.
* **Gateway:** Router IP (sub-interface VLAN 10 on the router: `192.168.1.1/24`).
* **Management VLANID:** 1 (optional)
### B6: Configure the "Employee Network" SSID
* Set the **Name** and **Password**.
* Check the Entire Configuration -> Finish
### B7: Move the PC and Connect to the Internal Network
* After using the PC to point the gateway to the WLC and modifying the WLC's configuration, connect the PC to the switch, **interface f0/3**.
* Confirm the PC's **IP/Netmask** belongs to **VLAN 10**, and the **Gateway** is the router's **VLAN 10 sub-interface**.
## 4.2. Router Configuration
### B1: Configure Sub-interfaces on the Router
* The sub-interfaces will serve as the **Gateways** for **VLANs 10, 20, and 30**.
### B2: Configure the DHCP Server
* Configure **IP Pools** to issue DHCP IP addresses for the corresponding VLANs.
* Required information includes: **IP Range** to assign/Excluded IP Range, **Gateway**, and **DNS-Server**.
## 4.3. PC3 Configuration for WLC GUI Management
* Set the **IP/Netmask/Gateway/DNS**.
* **Access the WLC GUI.**
* **Login information** was declared in **B4/4.1**.
## 5. Configure VLAN Interfaces
* Check that **only the Management Interface** currently exists.
* Add **INT-VLAN20 (VLAN 20)**
* **Port number**
* Declare the **IP/Netmask/Gateway/DHCP server** for **VLAN 20**.
* Add **INT-VLAN30 (VLAN 30)**
* **Port number**
* Declare the **IP/Netmask/Gateway/DHCP server** for **VLAN 30**.
## 6. WLANs Configuration
### 6.1. WLANs VLAN 20
#### B1: Declare Name/SSID/ID
#### B2: Declare the Interface for the WLAN20 SSID
#### B3: Configure Security: WPA/WPA2/WPA Policy
#### B4: Configure Authentication: PSK (Pre-Shared Key)
### 6.2. WLANs VLAN 30
#### B1: Declare Name/SSID/ID
#### B2: Declare the Interface for the WLAN30 SSID
#### B3: Configure Security: WPA/WPA2/WPA Policy
#### B4: Configure Authentication: PSK (Pre-Shared Key)
## 7. Switch Configuration
### B1: Configure VLANs/Names on the Switch: VLAN 10, VLAN 20, VLAN 30
### B2: Configure Trunking
* Interfaces **f0/1-5** – **trunk** – **trunk native 10**.
* Interface **f0/6** – **access** – **access vlan 10**.
### B3: Start the WLC and Check the DHCP IP Address on the APs
### B4: Check if APs have Joined the WLC -> Successful Join
## 8. Wireless Connection
### B1: DHCP Connection
* **Laptop1** declares the **SSID/PSK** to request **IP/Gateway/DNS**.
* **Tablet PC0** declares the **SSID/PSK** to request **IP/Gateway/DNS**.
* **Laptop0** declares the **SSID/PSK** to request **IP/Gateway/DNS**.
### B2: Check Connectivity, Network Convergence -> The Network Model has Converged
## 9. Test Server Configuration
### B1: Declare IP/DNS/Gateway/Subnet
### B2: Check Connectivity from Client to Test Server -> Success
## 10. INTERNET Configuration (Simulate Server 8.8.8.8)
* Declare **IP/DNS/Gateway/Subnetmask**.
## 11. Test Access Before ACL Deployment
* From **Laptop0 (192.168.2.11)**: Ping **INTERNET**, **Test Server** success.
* From **Laptop1 (192.168.2.12)**: Ping **INTERNET**, **Test Server** success.
* From **Tablet PC0 (192.168.3.12)**: Ping **INTERNET**, **Test Server** success.
## 12. Configure ACL According to Requirements
### B1: Deploy ACL Configuration
* Allow **192.168.3.0** and **192.168.1.0** to access the **Internet**.
* Deny **192.168.2.0** from accessing the **Internet**.
### B2: Test
* **192.168.2.1** fails to access the **Internet**, but accesses other networks normally.
* **192.168.1.252** successfully accesses the **Internet** and other networks.
### B3: Deploy ACL
* **192.168.3.0** is **denied** access to the **Test Server**.
### B4: Test
* **192.168.3.12** accesses the **Internet** normally, but **fails** to access the **Test Server**.
Sign in with Wallet
Connect another wallet