Cisco 4404 - Wireless LAN Controller User manual

QUICK START GUIDE
Cisco 4400 Series Wireless LAN Controllers
INCLUDING LICENSE AND WARRANTY
1About this Guide
2Introduction to the Controller
3Unpacking and Preparing the Controller for Operation
4Using the Startup Wizard
5Obtaining Documentation and Submitting a Service Request
6Cisco 90-Day Limited Hardware Warranty Terms
1 About this Guide
This guide is designed to help you install and minimally configure your Cisco 4400 Series
Wireless LAN Controller. This guide covers the following controller models: 4402-25,
4402-50, 4404-25, 4404-50, and 4404-100.

2
FCC Safety Compliance Statement
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no guarantee that interference
will not occur in a particular installation. If this equipment does cause harmful interference to radio
or television reception, which can be determined by turning the equipment off and on.
Try to correct the interference by one or more of the following measures:
•Verify that the ambient temperature remains between 32 to 104° F (0 to 40° C), taking into
account the elevated temperatures when installed in a rack or enclosed space.
•When multiple Cisco 4400 series controllers are mounted in an equipment rack, be sure that the
power source is sufficiently rated to safely run all the equipment in the rack.
•Verify the integrity of the electrical ground before installing the controller.
Safety Information
Safety warnings appear throughout this guide in procedures that may harm you if performed
incorrectly. A warning symbol precedes each warning statement. The warnings below are general
warnings that are applicable to the entire guide. Translated versions of the safety warnings in this guide
are provided in the Safety Warnings for Cisco 4400 Wireless LAN Controllers document that
accompanies this guide.
Warning This warning symbol means danger. You are in a situation that could cause bodily injury.
Before you work on any equipment, be aware of the hazards involved with electrical
circuitry and be familiar with standard practices for preventing accidents. Use the
statement number provided at the end of each warning to locate its translation in the
translated safety warnings that accompanied this device.
Statement 1071
SAVE THESE INSTRUCTIONS
Warning This equipment must be grounded. Never defeat the ground conductor or operate the
equipment in the absence of a suitably installed ground conductor. Contact the
appropriate electrical inspection authority or an electrician if you are uncertain that
suitable grounding is available. Statement 1024

3
Statement 371—Power Cable and AC Adapter
Statement 191—VCCI Class A Warning for Japan
2 Introduction to the Controller
Cisco 4400 series wireless LAN controllers offer the highest level of performance and scalability for
large scale enterprise wireless LAN deployments. In addition, these controllers deliver wireless LAN
services over an existing Ethernet or IP infrastructure, thereby protecting existing network investments
while providing the best in class wireless services. A core component of the Cisco unified wireless
solution, these controllers deliver wireless security, intrusion detection, radio management, quality of
service (QoS), and mobility across an entire enterprise. The controllers work in conjunction with other
controllers, Cisco Wireless Control System (WCS), and access points to provide network managers
with a robust wireless LAN solution.
Warning
This is a Class A product based on the standard of the Voluntary Control
Council for Interference by Information Technology Equipment (VCCI). If this
equipment is used in a domestic environment, radio disturbance may arise.
When such trouble occurs, the user may be required to take corrective
actions.

4
In order to best use this guide, you should have already designed the wireless topology of your
network. Because the radio resource management (RRM) feature automatically detects and configures
access points as they appear on the network, it is not necessary to have any access points on the
network to install and configure a controller.
Two versions of the 4400 series controller are available: 4402 and 4404 series controllers. Cisco 4402
controllers have two gigabit Ethernet distribution system ports, each of which is capable of managing
up to 48 access points. However, Cisco recommends no more than 25 access points per port due to
bandwidth constraints. The 4402-25 and 4402-50 models allow a total of 25 or 50 access points to
join the controller. Cisco 4404 controllers have four gigabit Ethernet distribution system ports, each
of which is capable of managing up to 48 access points. However, Cisco recommends no more than 25
access points per port due to bandwidth constraints. The 4404-25, 4404-50, and 4404-100 models
allow a total of 25, 50, or 100 access points to join the controller.
Figure 1 shows the front panel layout of the 4400 series controller.
Figure 1 Front Panel Layout
1Service port (RJ-45) 6Distribution port 1 & 2 Link and Activity LEDs
2Console port (DB-9 female) 7Distribution port 2
3Status, alarm, and power supply LEDs 8Distribution port 3
4Utility port (RJ-45) 9Distribution port 3 & 4 Link and Activity LEDs
5Distribution port 1 10 Distribution port 4
155837
STATUS
ALARM
LINK
SERVICE CONSOLE
LINK ACT LINK ACT
UTILITY 1
PS1
PS2 ACT
LINK
ACT
2 3 4
1 2 3 4 5 6 7 8 9 10

5
Figure 2 shows the back panel layout with a power supply unit installed in power supply slot 2.
Figure 2 Back Panel Layout
Checking the Controller LEDs
If your controller is not working properly, check the LEDs on the front panel of the unit. You can use
the LED indications to quickly assess the unit’s status. The LED indicators are described in
1VPN termination module Slot 1 4Slot 2 power supply power receptacle
2VPN termination module slot 0 5Slot 2 power supply switch
3Power supply slot 1 6Slot 2 power supply LED
Table 1 LED Indicators
Front Panel LEDs
LED Description
Service Port link Solid green indicates service port link is established.
Service Port activity Blinking green indicates link data transmission over the service port.
PS1 and PS2 Solid green indicates power supply # is operational.
Alarm Solid red indicates an undervoltage condition detected on one of the
DC/DC converters. Off indicates normal operation. This LED behavior
may also be defined by the controller software.
Status Solid green followed by blinking green indicates controller is rebooting
or loading software. Off indicates normal operation. After the controller
resets, the LED behavior is defined by the controller software.
Ethernet link Solid green indicates Ethernet link to wired network is established.
Ethernet activity Blinking green indicates data transmission over the Ethernet link
Distribution port link Solid green indicates link established on distribution port # link.
1 2 3 4 5 6
155923

6
3 Unpacking and Preparing the Controller for Operation
Follow these steps to unpack the 4400 series controller and prepare it for operation:
Step 1 Open the shipping container and carefully remove the contents.
Step 2 Return all packing materials to the shipping container and save it.
Step 3 Ensure that all items listed in the “Package Contents” section are included in the shipment.
Check each item for damage. If any item is damaged or missing, notify your authorized Cisco
sales representative.
Package Contents
Each access point package contains the following items:
•Cisco 4400 series wireless LAN controller and power cord
•Mounting hardware kit
•Translated Safety Warnings for Cisco 4400 Series Wireless LAN Controllers
•This guide
•Cisco product registration and Cisco documentation feedback cards
Distribution port activity Blinking green indicates data transmission on distribution port # link.
Rear Panel LEDs
LED Description
Power supply unit Solid white indicates normal operation. Solid red indicates a fault.
Table 1 LED Indicators (continued)
Front Panel LEDs

7
Required Tools and Information
You will need the following tools and information before you can install the controller:
•Wireless LAN controller hardware
– Controller with factory-supplied power cord and mounting hardware
– Network, operating system service network, and access point cables as required
•Command-line interface (CLI) console
– VT-100 terminal emulator on CLI console (PC, laptop, or palmtop)
– Null modem serial cable to connect CLI console and controller
•Local TFTP server (required for downloading operating system software updates). Cisco uses an
integral TFTP server. This means that third-party TFTP servers cannot run on the same
workstation as the Cisco WCS because Cisco WCS and third-party TFTP servers use the same
communication port.
Initial System Configuration Information
Obtain the following initial configuration parameters from your wireless LAN or network
administrator:
•A system (controller name).
•An administrative username and password. The default administrative username and password
are admin and admin, respectively.
•A service port interface IP address configuration protocol (none or DHCP).
•A management interface (DS Port or network interface port) IP address.
Note The service port interface and management interface must be on different subnets.
•A management interface netmask address.
•A management interface default router IP address.
•A VLAN identifier if the management interface is assigned to a VLAN, or 0 for an untagged
VLAN.
•Distribution system physical port number
– 4402: 1–2 for front panel GigE ports
– 4404: 1–4 for front panel GigE ports
•IP address of the default DHCP server that will supply IP addresses to clients.
•The lightweight access point protocol (LWAPP) transport mode (Layer 2 or Layer 3).

8
•A virtual gateway IP address (a fictitious, unassigned IP address, such as 1.1.1.1, used by all Cisco
wireless LAN controller Layer 3 security and mobility managers).
•A Cisco wireless LAN controller mobility group name, if required.
•An 802.11 network name (SSID) for WLAN 1. This is the default SSID that the access points use
when they join with the controller.
•Whether or not to allow static IP addresses from clients.
– Yes is more convenient, but has lower security (session can be hijacked).
– No is less convenient, but has higher security and works well for Windows XP devices.
•RADIUS server IP address, communications port, and secret (if you are configuring a RADIUS
server).
•The country code for this installation. Refer to the Cisco Wireless LAN Controller Configuration
Guide for country code information. This guide is available at cisco.com.
•Status of the 802.11a, 802.11b, and 802.11g networks (enabled or disabled).
•Status of radio resource management (RRM) (enabled or disabled).
Choosing a Physical Location
You can install the controller almost anywhere, but it is more secure and reliable if you install it in a
secure equipment room or wiring closet. For maximum reliability, mount the controller using the
following guidelines:
Warning To prevent the system from overheating, do not operate it in an area that exceeds the
maximum recommended ambient temperature of:
104° F (40° C) Statement 1047
Warning To prevent airflow restriction, allow clearance around the ventilation openings to be at
least:
4-in (10.16 cm) Statement 1076
Warning Take care when connecting units to the supply circuit so that wiring is not overloaded.
Statement 1018
•Make sure you can reach the controller and all cables attached to it.
•Make sure that water or excessive moisture cannot get into the controller.

9
•Make sure that the controller is within 328 ft. (100 m) of equipment connected to a 1000BASE-T
port.
•Make sure the controller is within one of the following distances of equipment connected to the
optional 1000BASE-SX or -LX port:
– 722 ft. (220 m) when using 160 MHz-km rated 62.5/125 um multimode fiber.
– 902 ft. (275 m) when using 200 MHz-km rated 62.5/125 um multimode fiber.
– 1312 ft. (400 m) when using 400 MHz-km rated 50/125 um multimode fiber.
– 1641 ft. (500 m) when using 500 MHz-km rated 50/125 um multimode fiber.
Note These distances depend on the small form factor pluggable (SFP) gigabit converter being
used. See the Gigabit Interface Converter (GBIC) Module and Small Form-Factor
Pluggable (SFP) GBIC Module Installation Information and Specifications at
http://www.cisco.com/en/US/docs/routers/7200/install_and_upgrade/gbic_sfp_modules_i
nstall/5067g.html.
The 1000BASE-SX SFP modules provide 1000 Mbps wired connections to a network through
850nM (SX) fiber-optic links using LC physical connectors. The 1000BASE-LX SFP modules
provide 1000 Mbps wired connections to a network through 1300nM (LX/LH) fiber- optic links
using LC physical connectors.
Installing the Chassis
The controller ships with rack mounting ears attached and the desktop or shelf mounting rubber feet
in a separate bag. Follow these guidelines when mounting the controller:
•When mounting the controller on a desktop or shelf, attach the rubber feet to the bottom of the
controller chassis, and place the chassis on any secure horizontal surface. If desired, you can
remove the rack mounting ears from the controller.
•When mounting the controller in an EIA standard rack, attach the ears to the equipment rack
using the factory supplied fasteners.
Caution The controller weighs 15.2 lbs (6.95 kg). For safety, two or more people must work
together to perform the rack mount installation.
•Install the SFP modules as described in the 1000BASE-SX, 1000BASE-LX, and 1000BASE-T SFP
Module Quick Start Guide.
•If you have purchased an extra power supply module or enhanced security modules, refer to the
Cisco 4400 Series Power Supply Quick Start Guide for information about installing these devices.

10
Warning This unit might have more than one power supply connection. All connections must be
removed to de-energize the unit. Statement 1028
Connecting the Controller’s Console Port
Before you can configure the controller for basic operations, you need to connect it to a PC that uses
a VT-100 terminal emulator (such as HyperTerminal, ProComm, Minicom, or Tip).
Follow these steps to connect the PC to the controller’s console port:
Step 1 Plug the RJ-45 connector on a null-modem serial cable into the controller’s console port and
the other end of the cable into the PC’s serial port.
Step 2 Start the PC’s terminal emulation program.
Step 3 Configure the terminal emulation program for the following parameters:
•9600 baud
•8 data bits
•No flow control
•1 stop bit
•No parity
Running the Bootup Script and Power-On Self Test
When you plug the controller into an AC power source, the bootup script initializes the system, verifies
the hardware configuration, loads its microcode into memory, verifies its operating system software
load, and initializes itself with its stored configurations. Before performing this test, you should have
connected your PC to the controller’s CLI console as described in the “Connecting the Controller’s
Console Port” section on page 10. Follow these steps to run the bootup script and conduct the
power-on self test (POST).
Step 1 Plug an AC power cord into the back of the controller and connect the other end to a
grounded 100 to 240 VAC, 50/60 Hz electrical outlet.