Courseiva
CCNA lab 17

Wireless: a WPA2-PSK WLAN on a 9800 controller

Use the controller's web interface to create a WPA2-PSK WLAN, put its clients in VLAN 20 with a policy profile, publish it on the AP with a policy tag, and connect a laptop.

About 30 minutes 5 devices 4 tasksIntermediate

Scenario

AP1 has already joined the 9800 controller WLC1 (its management interface is Vlan10, 10.10.10.5). Staff need a Wi-Fi network: SSID Staff, WLAN ID 1, WPA2 with the pre-shared key Staff2026!, and staff devices must land in VLAN 20 (10.20.20.0/24), where R1 runs DHCP. Configure it from WLC1's web interface (or its CLI), then connect LAPTOP1 and check that it reaches the internet host 8.8.8.8.

Gi0/0/0Gi0/1Gi1Gi0/2eth0Fa0/1R1R1 — Router (ISR 4321)SW1SW1 — Switch (Catalyst 2960-24)WLC1WLC1 — Wireless controller (Catalyst 9800)AP1AP1 — Access point (Catalyst 9120)LAPTOP1LAPTOP1 — Wireless laptop

Your tasks

  1. WLAN profile Staff (ID 1, SSID Staff) uses WPA2 with a pre-shared key, not 802.1X, and is enabled.
  2. Policy profile STAFF-POLICY puts clients in VLAN 20 and is enabled.
  3. Policy tag STAFF-TAG maps Staff to STAFF-POLICY, and AP1 uses it.
  4. LAPTOP1 connects to Staff, gets an address in 10.20.20.0/24 and can ping 8.8.8.8.

The lab checks the result, not the exact commands. For example, a ping task passes only when the ping really succeeds through the network you built.

Start the lab