Cisco 9800 Wireless LAN Controller (WLC) Basic Configuration Guide

March 1, 2025

The Cisco Catalyst 9800 Series Wireless Controllers run on IOS-XE, offering improved scalability, security, and programmability. This guide covers the basic setup and configuration of a Cisco 9800 WLC using both CLI and GUI.

1. Initial Setup of Cisco 9800 WLC

Before starting, ensure:
✔ You have console or SSH access to the WLC.
✔ The WLC is powered on and connected to the network.
✔ APs can communicate with the WLC via CAPWAP.

Step 1: Access the WLC

You can access the Cisco 9800 WLC through:

Console Connection: Using a serial cable and a terminal emulator like PuTTY.
Web GUI: Open a web browser and go to https://<WLC-Mgmt-IP>.
SSH: If enabled, use ssh admin@<WLC-Mgmt-IP>.

2. Basic WLC Configuration Using CLI

Step 2: Set Up Management Interface

configure terminal
interface GigabitEthernet1
 ip address 192.168.1.100 255.255.255.0
 no shutdown
exit

🔹 Assigns an IP to the management interface and brings it up.

Step 3: Configure Hostname and Domain

configure terminal
hostname WLC-9800
ip domain-name example.com
exit

Step 4: Set Up Time and NTP

configure terminal
clock timezone IST 5 30
ntp server 192.168.1.1
exit

🔹 Ensures accurate time synchronization.

Step 5: Create a VLAN Interface

configure terminal
interface Vlan10
 description Wireless VLAN
 ip address 192.168.10.1 255.255.255.0
exit

🔹 Assigns VLAN 10 for wireless clients.

3. Configure WLAN and Security

Step 6: Create an SSID (WLAN)

configure terminal
wlan MyWiFi 1 MyWiFi
 no shutdown
exit

🔹 Creates an SSID named “MyWiFi”.

Step 7: Assign VLAN to the WLAN

configure terminal
wlan MyWiFi 1 MyWiFi
 client vlan 10
exit

🔹 Maps WLAN to VLAN 10.

Step 8: Configure WPA2-PSK Security

configure terminal
wlan MyWiFi 1 MyWiFi
 security wpa akm psk
 security wpa psk set-key ascii MySecurePassword
exit

🔹 Enables WPA2-PSK authentication with a secure key.

4. Configure APs to Join the WLC

Step 9: Enable CAPWAP and AP Join Settings

configure terminal
ap profile default-ap-profile
 capwap preferred-mode ipv4
exit

🔹 Ensures APs use CAPWAP for communication.

Step 10: Verify APs

show ap summary

🔹 Displays a list of connected APs.

5. Enable DHCP for Wireless Clients

Step 11: Configure DHCP on WLC

configure terminal
ip dhcp pool WirelessClients
 network 192.168.10.0 255.255.255.0
 default-router 192.168.10.1
 dns-server 8.8.8.8
exit

🔹 Assigns IPs dynamically to wireless clients.

6. Save and Verify Configuration

Step 12: Save Configuration

write memory

🔹 Saves the configuration permanently.

Step 13: Verify WLAN and AP Status

show wlan summary
show ap summary
show wireless client summary

🔹 Displays configured WLANs, connected APs, and wireless clients.

7. Configuring WLC Using Web GUI

Login to Web GUI:

Open a web browser and go to https://<WLC-Mgmt-IP>.

Basic Setup Wizard:

Navigate to Configuration > Setup > Start and follow the wizard.

Create an SSID (WLAN):

Go to Configuration > Tags & Profiles > WLANs

Click Add, enter SSID Name, and choose Security Type (WPA2-PSK).

Assign VLAN & Interface:

Go to Configuration > Interface

Create VLAN 10 and assign it to the SSID.

Enable APs:

Go to Configuration > Wireless > Access Points

Verify APs are registered.

8. Troubleshooting Common Issues

Issue	Solution
APs not joining WLC	Check CAPWAP settings, ensure APs can reach WLC.
Clients not getting IPs	Verify DHCP settings and VLAN assignments.
Weak Wi-Fi signal	Adjust AP placement, power levels, and channel settings.
WLC GUI not accessible	Ensure HTTP/HTTPS access is enabled.

9. Summary

✅ Basic WLC setup: Management IP, VLANs, DHCP.
✅ Configure SSID & Security: WPA2-PSK authentication.
✅ Ensure APs join WLC: CAPWAP enabled, VLANs mapped.
✅ Save and verify configuration.

The Lazy Networker