CloudLabBox
Try the free demo

CCNA lab 36 of 46

A wireless LAN controller with a WPA2-PSK WLAN

Bring up a Catalyst 9800-CL wireless controller from its console, configure the switch ports an access point needs in local and FlexConnect mode, then build a WPA2-PSK staff WLAN in the controller's web GUI and read every setting back from the CLI.

Run this lab

It needs Lite: its 3 nodes are set to 6 vCPU and 7,168 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNA 200-301 guided labs, then 36 - A wireless LAN controller with a WPA2-PSK WLAN

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 75 minutes
Nodes need
6 vCPU, 7,168 MB
Smallest plan
Lite

The scenario

Abbeyfield Hotel is replacing its home-grade Wi-Fi with a controller-based system. The virtual wireless controller WLC1 (a Catalyst 9800-CL) is connected to the access switch S1, and the IT admin works from ADMIN (a desktop with Firefox). Two ceiling access points will arrive next week: AP-1 will run in local mode and AP-2 in FlexConnect mode. Your job today: prepare the switch ports, bring the controller onto the management network, and build the staff WLAN so the APs only need plugging in.

DevicePort / interfaceVLAN / address
WLC1Gi2 (uplink, 802.1Q trunk)VLANs 30 and 99; management SVI VLAN 99 10.36.99.10/24
S1Gi0/0 to WLC1trunk, VLANs 30 and 99
S1Gi0/1 to ADMINaccess VLAN 99
S1Gi0/2 for AP-1 (local mode)access VLAN 99
S1Gi0/3 for AP-2 (FlexConnect)trunk, native VLAN 99, allowed 30 and 99
ADMINeth010.36.99.100/24

WLAN to build: profile and SSID CLB-STAFF, WLAN ID 1, WPA2 with AES, pre-shared key Staff-WiFi-2026, clients in VLAN 30 (STAFF-WIFI), through a policy profile STAFF-POLICY and a policy tag HOTEL-TAG. Controller login admin / Cl@ssWlc2026.

What you’ll practise

  • Describe wireless principles: bands, non-overlapping channels, RF behaviour, interference and security protocols
  • Describe autonomous, cloud-based and controller-based architectures and the AP modes
  • Configure switch ports for local-mode and FlexConnect access points and the controller uplink
  • Give a controller its management interface and reach its GUI over HTTPS
  • Create a WLAN with WPA2-PSK, a policy profile and a policy tag, and interpret the settings

The tasks

  1. Learn the wireless principles
  2. Know the architectures and AP modes
  3. Prepare the switch
  4. Bring the controller onto the network
  5. Build the WLAN in the GUI
  6. Read the WLAN back on the CLI
  7. Troubleshoot a wireless client (on paper)

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of A wireless LAN controller with a WPA2-PSK WLAN3 nodes, 2 links. Every link is listed as text below the diagram.WLC1S1ADMINeth0Gi0/1Gi2Gi0/0
3 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • WLC1 Gi2 to S1 Gi0/0
  • ADMIN eth0 to S1 Gi0/1
Nodes in A wireless LAN controller with a WPA2-PSK WLAN, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
WLC1Cisco Catalyst 9800-CLc9800cl-17.12.024 vCPU, 4,096 MB
S1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
ADMINEVE-NG GUI server (Docker)eve-gui-server:latest1 vCPU, 2,048 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNA 200-301 guided labs.

  3. Open 36 - A wireless LAN controller with a WPA2-PSK WLAN and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNA labs

All CCNA labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.