Add a Wireless Access Point to the Agency’s Network

Select Your Wireless Access Point

Now you're going to move on to wireless devices and add some wireless end devices to your network diagram in Packet Tracer:

Illustration of the wireless devices: webcam, tablet, client Wi-Fi, Wi-Fi access point, multimedia Wi-Fi and smartphone Wi-Fi
Here’s an overview of the existing wireless devices in the corporate network

Let’s look back at our IP addressing plan. This is what it looked like for the WiFi and communication equipment:

Groups

VLAN ID

Network address

First available address

Last available address

Network gateway

WIFI

60

192.168.60.0/24

192.168.60.1

192.168.60.253

192.168.60.254

Camera /Multimedia

90

192.168.90.0/24

192.168.90.1

192.168.90.253

192.168.90.254

 To keep things simple and readable, I suggest that we merge these two networks and just retain one of them: WiFi 192.168.60.0/24.

Have a look at the wireless devices that are available in Cisco Packet Tracer by going to the Network Devices menu and choosing Wireless Devices:

Screenshot of the wireless devices in Cisco Packet Tracer
Here’s an overview of the wireless devices in Cisco Packet Tracer

We’re going to look at three of these devices in particular:

Illustration of the three devices: access point, router, and WLC
The three devices: access point, router, and WLC

1. Access Point – Packet Tracer

This is an access point developed for Cisco Packet Tracer that doesn't actually exist in the real world. It’s very simple to use and does a great job—there’s no need to get bogged down with configuring more complicated wireless devices. It includes a basic Ethernet interface, but we can connect it to other interfaces, such as a fiber optic interface, which provides higher transmission speeds.

Screenshot of the Access point3 interface in Packet Tracer
Option to change the interface to fiber optic on the wireless access point in Packet Tracer

Configuring the device is quite simple. From the Config menu, you can configure basic parameters such as SSID name, wireless channel number, and wireless security.

Screenshot of the configuration menu for wireless access point in Packet Tracer
Configuration menu for wireless access point in Packet Tracer 

2. Linksys WRT-300N

The Linksys WRT-300N wireless router has more features than the Packet Tracer access point. This router is usually used in home networks (rather than corporate networks) because it has one Ethernet port for the Internet connection and four additional Ethernet ports to connect end devices in your home, such as computers or network printers. If you were producing a network diagram simulating a home network, this is the wireless router you’d choose!

Photo of a Linksys WRT-300N router
A Linksys WRT-300N router

The Linksys WRT-300N router can be configured using the graphical user interface in Cisco Packet Tracer, exactly as you would if you were accessing the router using a web browser. All of the menus are clickable and provide access to the configuration pages. Great, isn't it?

The developers have tried to simulate real-life functionality for configuring the router.

Screenshot of the configuration menu for the Linksys WRT-300N router
Configuration menu for the Linksys WRT-300N router

3. WLC – Wireless LAN Controller

The wireless access point and router that we’ve previously seen operate independently of each other. However, when you have various access points to manage in your organization, you’ll need to use a WLC (Wireless LAN Controller) to be able to configure the LAPs (Lightweight Access Point).

These lightweight access points don’t need any initial configuration and use the LWAPP protocol (Lightweight Access Point Protocol) to communicate with the wireless controller (WLC). The advantage is that each time an access point is added within the organization, there’s no configuration required, which is pretty handy! 

Screenshot of the Light Access Point Protocol interface
Back view of a LAP in Cisco Packet Tracer

Right, let's go back to Cisco Packet Tracer. We’re going to add the wireless access point. I’ll explain how to do this in the video below:

Add Mobile Devices

Now you're going to add mobile devices in Cisco Packet Tracer. Have a look at the end devices available in Cisco Packet Tracer. Go to the End Devices menu and choose End Devices.

Screenshot of the end devices icons in Cisco Packet Tracer
Here’s an overview of the end devices in Cisco Packet Tracer

Choose the following wireless end devices:

  • Laptop

  • TV

  • Tablet

  • Smartphone

Oh no, there’s no IP camera! Don’t worry. I told you previously that the Cisco Packet Tracer developers thought of everything! Go to End Devices → Home:

Screenshot of the end devices icons available from the Home menu in Cisco Packet Tracer
Here’s an overview of the end devices available from the Home menu in Cisco Packet Tracer—they even have a smart coffee machine

Have a good look at the Home menu. You’ll find the webcam there. This has equivalent functionality to an IP camera and the configuration is very similar.

Screenshot of the webcam in the drop-down menu
The webcam in the drop-down menu

Let’s now add these end devices in Cisco Packet Tracer. I’ll explain how in this video:

Configure Your Wireless Network

Now that you’ve selected your wireless access point and added your wireless end devices, you need to configure them!

First of all, you need to choose an SSID name and wireless security with a passphrase. This is what you’re going to use:

SSID name

Wireless security

Passphrase

Agency

WPA2-PSK

1234-Metropolitan:1234

Next, you need to select the IP addresses, subnet mask, and default gateway to use for the wireless end devices. This is what you’re going to use:

Laptop

TV

Tablet

Smartphone

192.168.60.1/24

192.168.60.2/24

192.168.60.3/24

192.168.60.4/24

IP camera

Gateway

192.168.60.5/24

192.168.60.254

For now, configure the wireless network by specifying the SSID name and the wireless security. Here’s how to do it:

Next, we’ll configure the IP addresses of the wireless end devices. Watch the video and then do the configuration at your end:

Test the Wireless Communication Between Your Devices

All that’s left for you to do is to test the communication between your different wireless devices:

Configure Your Wi-Fi Network Using a Controller

It’s also possible to configure your Wi-Fi network using a controller. Here is the topology used:

Configuring a Wi-Fi network using a controller
Configuring a Wi-Fi network using a controller

Router R1 uses a “Router on a Stick” configuration:

R1(config)#interface gig 0/0

R1(config-if)#no shutdown

R1(config-if)#exit

R1(config)#interface gig 0/0.1

R1(config-subif)#encapsulation dot1q 10

R1(config-subif)#ip address 192.168.10.254

R1(config-subif)#ip helper-address 192.168.1.10

R1(config-subif)#exit

R1(config)#interface gig 0/0.2

R1(config-subif)#encapsulation dot1q 20

R1(config-subif)#ip address 192.168.20.254

R1(config-subif)#ip helper-address 192.168.1.10

R1(config-subif)#exit

R1(config)#interface gig 0/0.3

R1(config-subif)#encapsulation dot1q 30

R1(config-subif)#ip address 192.168.30.254

R1(config-subif)#ip helper-address 192.168.1.10

R1(config-subif)#exit

R1(config)#interface gig 0/0.4

R1(config-subif)#encapsulation dot1q 1

R1(config-subif)#ip address 192.168.1.254

R1(config-subif)#exit

Switch SW1 uses the following configuration:

SW1(config)# vlan 10

SW1(config-vlan)# name VLAN10

SW1(config-vlan)# exit

SW1(config)# vlan 20

SW1(config-vlan)# name VLAN20

SW1(config-vlan)# exit

SW1(config)# vlan 30

SW1(config-vlan)# name VLAN30

SW1(config-vlan)# exit

The SW1 interfaces connected to R1, the Wi-Fi access point (AP), and the controller must be configured as TRUNK ports because traffic from all 3 VLANs (10, 20, and 30) needs to pass between the router, the access point that will broadcast one SSID per VLAN, and the controller.

SW1(config)# interface range fa 0/1-3

SW1(config-if-range)# switchport mode trunk

Here is the DHCP server configuration:

Server IP configuration interface showing a static IP address of 192.168.1.10, a subnet mask of 255.255.255.0, and a default gateway of 192.168.1.254.
DHCP server configuration
DHCP interface enabled with 4 configured pools: one server pool and three VLANs (10, 20, and 30), each with a gateway, a starting IP address, and a subnet mask.
Detailed configuration overview

The DHCP server will also operate in VLAN 1, where both it and the Wi-Fi access points are located, in order to assign an IP address to each access point and provide the controller address for synchronization.
Here is the IP configuration of the admin PC that will be used to connect to the controller’s web interface:

PC named PC-ADMIN with a static IP address of 192.168.1.2, a subnet mask of 255.255.255.0, and a gateway of 192.168.1.254 configured on the FastEthernet0 interface.
The admin PC IP configuration

You then need to assign an IP address to the controller:

The WLC controller uses IP address 192.168.1.253, a subnet mask of 255.255.255.0, and a gateway of 192.168.1.254 on the management interface.
Assign an IP address to the controller

The next step is to connect to the controller from its web interface using the ADMIN PC’s browser:

PC-ADMIN accesses the Cisco 2500 controller web interface via IP address 192.168.1.253 to create an administrator account. Three fields are displayed: name, password, and confirmation.
Open the ADMIN PC browser

Here’s how to complete the controller’s basic setup:

Écran de configuration du contrôleur WLC : nom du système

Suite de la configuration du WLC : masque de sous-réseau 255.255.255.0, passerelle par défaut 192.168.1.254 et VLAN de gestion défini sur l’ID 0. Deux boutons : Back et Next.

Configuration d’un réseau Wi-Fi nommé TEST pour les employés, sécurisé en WPA2 Personal avec mot de passe. Le VLAN utilisé est le VLAN de gestion et le serveur DHCP est facultatif.

Configuration de l’adresse IP virtuelle du contrôleur définie sur 192.0.2.1, avec le groupe de mobilité locale réglé sur

Once the setup is complete, connect to the controller over HTTPS and sign in:

From PC-ADMIN, secure access to the WLC controller web interface via address 192.168.1.253 displays a login window requesting a username and password.
Connect to the controller over HTTPS

You’ll arrive at the controller’s main interface:

Cisco 2504 WLC management interface displayed in the PC-ADMIN browser. Management IP: 192.168.1.253, software version 8.3.111.0, and no rogue clients or rogue access points detected.
The controller’s main interface

Go to the CONTROLLER tab, then INTERFACES, and modify the MANAGEMENT interface as follows:

WLC settings showing AP management enabled. The interface uses IP address 192.168.1.253, subnet mask 255.255.255.0, gateway 192.168.1.254, and VLAN ID 1.
Modify the MANAGEMENT interface

Once the interface has been modified, add one interface for each VLAN:

Interface affichant une pagination avec 2 entrées visibles sur 2, accompagnée d’un bouton « New... » pour ajouter une nouvelle entrée.

Création d’une nouvelle interface réseau nommée VLAN10 avec un identifiant VLAN défini sur 10 dans l’onglet de configuration du contrôleur.

Configuration of the VLAN10 interface on WLC physical port 1, with IP address 192.168.10.253, subnet mask 255.255.255.0, and gateway 192.168.10.254.
Add one interface for each VLAN

 

Do the same for VLANs 20 and 30. You’ll get the following result:

List of interfaces configured on the controller: three dynamic VLAN interfaces (10, 20, and 30), one management interface (VLAN 1) enabled for AP management, and one virtual interface using 192.0.2.1.
The result for VLANs 20 and 30

Then go to the WLANs tab and delete the TEST WLAN ID created during setup.

Add a new WLAN:

Creating a new WLAN with the selected type.
Add a new WLAN

Once the WLAN has been created, configure it like this:

L’onglet de configuration du WLAN

L’onglet sécurité du WLAN « VLAN10 » indique une protection WPA+WPA2. Seule la politique WPA2 est activée, avec chiffrement AES. Le filtrage MAC et la transition rapide sont désactivés.
WLAN authentication key management uses PSK mode (pre-shared key) enabled in ASCII format. Other methods such as 802.1X and FT are disabled.
The WLAN configuration

In the WLAN advanced settings, enable FLEX CONNECT LOCAL SWITCHING. This allows the access point to forward traffic between clients locally instead of sending it back up through the controller:

Enable FLEX CONNECT LOCAL SWITCHING
Enable FLEX CONNECT LOCAL SWITCHING

Configure the WLANs for VLANs 20 and 30 the same way, adapting the interface and the WLAN name (SSID). You should end up with 3 WLANs:

List of the 3 WLANs configured on the controller: VLAN10, VLAN20, and VLAN30. All are enabled, use WPA2 with PSK authentication, and each has an SSID matching its name.
Your 3 WLANs

Install the power adapter on the Wi-Fi access point:

Physical view of a wireless access point (AP) showing that a module has been installed.
Install the power adapter

Then configure the access point to use DHCP:

The access point’s GigabitEthernet0 interface is statically configured with IP address 192.168.1.1 and subnet mask 255.255.255.0. The MAC address is 0001.632B.0E01. DHCP mode is disabled.
Configure the access point

A few seconds later, hover your cursor over the Wi-Fi access point. You should see that it is correctly synchronized with the controller and broadcasting the different WLANs:

3702i access point named
Verify synchronization

From the controller interface, you can see the access point under the WIRELESS tab:

Cisco wireless controller interface showing one active access point named
The access point appears under the Wireless tab

Next, add a Wi-Fi card to each laptop. To do this, press the ON/OFF button on each PC. Then remove the Ethernet card by dragging and dropping it toward the Wi-Fi card icon at the bottom right:

Screenshot of a software interface showing a context menu labeled “Customize Icon in Logical View,” with a laptop icon on the right and a network module shown in the lower-right corner.
Remove the Ethernet card

The SLOT is now empty. Still using drag and drop, add the Wi-Fi card and press the PC’s ON/OFF button. Do the same for the other two PCs, then connect each PC to the SSID that matches its VLAN:

Connect each PC to the SSID that matches its VLAN. Connect each PC to the SSID that matches its VLAN.
Connect each PC to the SSID

The three PCs are now connected!

Topologie réseau avec un point d’accès connecté à 3 PC en Wi-Fi (VLAN10, 20, 30), un switch central relié à un routeur, un serveur DHCP, un contrôleur WLC et un PC admin.

You can verify their IP settings. Here is the VLAN10 example:

PC-VLAN10 is connected over Wi-Fi through the Wireless0 interface, statically configured with IP address 192.168.10.1, subnet mask 255.255.255.0, and gateway 192.168.10.254.
The VLAN10 IP settings

Because inter-VLAN routing is handled by R1, the PCs can communicate with each other:

Connectivity test results from a network workstation: pings to IP addresses 192.168.20.1 and 192.168.30.1 succeed with no packet loss, with average response times of 16 ms and 17 ms respectively.
Success! The PCs can communicate with each other!

Let's Recap!

In this chapter, you’ve seen:

  • how to choose a wireless access point based on your working environment.

  • how to add mobile devices to your network using Cisco Packet Tracer.

  • how to configure the wireless access point and IP configurations for wireless end devices using Cisco Packet Tracer.

  • how to test communication between the various end devices in Cisco Packet Tracer.

  • Configure your Wi-Fi network using a controller.

Now that you’ve configured a WiFi access point and the end devices, in the next chapter you’re going to configure the basic switch parameters.

Et si vous obteniez un diplôme OpenClassrooms ?
  • Formations jusqu’à 100 % financées
  • Date de début flexible
  • Projets professionnalisants
  • Mentorat individuel
Trouvez la formation et le financement faits pour vous