Cisco Systems CGR1120K9 Network Hardware User Manual


 
20
Cisco Connected Grid Modules for CGR 1000 Series—WiMAX Installation and Configuration Guide
OL-26236-03
Configuring the Module
Step 1–WiMAX Scan-list Configuration
To create a scan-list, issue the following commands:
Router# configure terminal
Router(config)# wimax scan-list aaa
Router(config-scan-list)# channel index 1 frequency 2350000 bandwidth 10000
Router(config-scan-list)# nap id 00:00:01 priority 1 channel-index 1
Router(config-scan-list)# nsp id 00:00:01 home
NAP (Network Access Provider)—The base station. It provides access to the NSPs which provides
network connectivity.
NSP (Network Service Provider)—Provides network connectivity and access to NAPs.
Maximum number of the number of frequencies: 1
Step 2–WiMAX Interface Configuration
To attach the scan-list to an interface, issue the following commands:
Router# configure terminal
Router(config)# interface wimax interface_name
Router(config-if)# no shutdown <-- THIS SHOULD BE SHUT
Router(config-if)# scan-list aaa
Router(config-if)# ip address dhcp
Router(config-if)# no shutdown
Step 3–Enable Security Parameters
To enable security parameters, follow these steps:
Step 1 Load the certificates onto the bootflash. Create a trustpoint and import the device certificate.
Router# configure terminal
Router(config)# crypto ca trustpoint device_cert_trustpoint
Router(config)# crypto ca import device_cert_trustpoint pkcs12 path password
Step 2 Create a trustpoint and import the server root certificate authority (CA) certificate.
Router(config)# crypto ca trustpoint server_root_CA_trustpoint
Router(config)# crypto ca import server_root_CA_trustpoint pkcs12 path password
Step 3 Configure the authentication method as EAP-TLS:
Router# configure terminal
Router(config)# interface wimax interface
Router(config-if)# pkm trustpoint server_root_ca server_root_CA_trustpoint
Router(config-if)# pkm auth-method eap-tls
Router(config-if)# pkm version pkm-v2
Router(config-if)# pkm trustpoint device device_cert_trustpoint <-- *
Router(config-if)# pkm trustpoint server_root_ca