Filter
Top Products
4-34
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter 4 Configuring the Access Point for the First Time
Automatic Configuring of the Access Point
RA filtering
RA filtering increases the security of the IPv6 network by dropping RAs coming from wireless clients.
RA filtering prevents misconfigured or malicious IPv6 clients from connecting to the network, often
with a high priority that takes precedence over legitimate IPv6 routers. In all cases, the IPv6 RA is
dropped at some point, protecting other wireless devices and upstream wired network from malicious or
misconfigured IPv6 devices.
However, RA filtering is not supported in the uplink direction.
Automatic Configuring of the Access Point
The Autoconfig feature of autonomous access points allows the AP to download its configuration,
periodically, from a Secure Copy Protocol (SCP) server. If the Autoconfig feaure is enabled, the AP
downloads a configuration information file from the server at a pre-configured time and applies this
configuration. The next configuration download is also scheduled along with this.
Note The AP does not apply a configuration if it is the same as the last downloaded configuration.
Enabling Autoconfig
To enable Autoconfig:
Step 1 Prepare a Configuration Information File
Step 2 Enable environmental variables
Step 3 Schedule the Configuration Information File Download
Prepare a Configuration Information File
An Autoconfig-enabled AP downloads the configuration information file from the SCP server. The
configuration information file is an XML file, containing the following information:
• The new startup-configuration.
• An Absolute time and a Range value. The AP schedules the next information file download at this
absolute time plus a random value between 0 and the range value.
The configuration information file has the following format:
<?xml version="1.0" encoding="UTF-8"?>
<l2tp_cfg>
<cfg_fetch_start_time>Absolute Time</cfg_fetch_start_time>
<cfg_fetch_time_range>Random Jitter</cfg_fetch_time_range>
<cfg_fetch_config>
<![CDATA[
<Startup config>
]]>
</cfg_fetch_config>