configuring wireless controller - S7500E module

[robkwild]

hi all,

just a few questions regarding this document, if any of you can help much appreciated -

https://whostheman.files.wordpress.com/2011/01/h3c_wireless_technical_overview.pdf

page 32 -

do i use clear or crypto

do i use open system or shared key - i want to use WPA2

page 35 -

do i need to configure cipher suite, if so how do i do it for WPA2, because this page just seems like wep stuff

many thanks,

rob

[robkwild]

heres my switch config -

[sw7510-GigabitEthernet0/0/1]display vlan all
 VLAN ID: 1
 VLAN Type: static
 Route Interface: configured
 Description: old_staff
 Name: VLAN 0001
 Tagged   Ports:
    GigabitEthernet11/0/1
    Ten-GigabitEthernet2/0/1
 Untagged Ports:
    GigabitEthernet0/0/2     GigabitEthernet0/0/3     GigabitEthernet0/0/4
    GigabitEthernet0/0/5     GigabitEthernet0/0/6     GigabitEthernet0/0/7
    GigabitEthernet0/0/8     GigabitEthernet0/0/9     GigabitEthernet0/0/10
    GigabitEthernet0/0/11    GigabitEthernet0/0/12    GigabitEthernet0/0/13
    GigabitEthernet0/0/14    GigabitEthernet0/0/15    GigabitEthernet0/0/16
    GigabitEthernet0/0/17    GigabitEthernet0/0/18    GigabitEthernet0/0/20
    GigabitEthernet0/0/21    GigabitEthernet0/0/22    GigabitEthernet0/0/24
    GigabitEthernet0/0/25    GigabitEthernet0/0/26    GigabitEthernet0/0/27
    GigabitEthernet0/0/28    GigabitEthernet0/0/29    GigabitEthernet0/0/30
    GigabitEthernet0/0/31    GigabitEthernet0/0/32    GigabitEthernet0/0/33
    GigabitEthernet0/0/35    GigabitEthernet0/0/36    GigabitEthernet0/0/37
    GigabitEthernet0/0/38    GigabitEthernet0/0/39    GigabitEthernet0/0/40
    GigabitEthernet0/0/41    GigabitEthernet0/0/42    GigabitEthernet0/0/43
    GigabitEthernet0/0/44    GigabitEthernet0/0/46    GigabitEthernet11/0/2
    GigabitEthernet11/0/3    GigabitEthernet11/0/4    GigabitEthernet11/0/5
    GigabitEthernet11/0/6    GigabitEthernet11/0/7    GigabitEthernet11/0/8
    GigabitEthernet11/0/10   GigabitEthernet11/0/11   GigabitEthernet11/0/12
    GigabitEthernet11/0/13   GigabitEthernet11/0/14   GigabitEthernet11/0/15
    GigabitEthernet11/0/16   GigabitEthernet11/0/17   GigabitEthernet11/0/18
    GigabitEthernet11/0/19   GigabitEthernet11/0/20   GigabitEthernet11/0/21
    GigabitEthernet11/0/22   GigabitEthernet11/0/23   GigabitEthernet11/0/25
    GigabitEthernet11/0/26   GigabitEthernet11/0/27   GigabitEthernet11/0/28
    GigabitEthernet11/0/29   GigabitEthernet11/0/30   GigabitEthernet11/0/31
    GigabitEthernet11/0/32   GigabitEthernet11/0/33   GigabitEthernet11/0/34
    GigabitEthernet11/0/35   GigabitEthernet11/0/36   GigabitEthernet11/0/37
    GigabitEthernet11/0/38   GigabitEthernet11/0/39   GigabitEthernet11/0/40
    GigabitEthernet11/0/41   GigabitEthernet11/0/42   GigabitEthernet11/0/43
    GigabitEthernet11/0/44   GigabitEthernet11/0/45   GigabitEthernet11/0/46
    GigabitEthernet11/0/47   GigabitEthernet11/0/48
    Ten-GigabitEthernet2/0/2

 VLAN ID: 2
 VLAN Type: static
 Route Interface: not configured
 Description: staff
 Name: VLAN 0002
 Tagged   Ports:
    GigabitEthernet11/0/1
    Ten-GigabitEthernet2/0/1
 Untagged Ports: none

 VLAN ID: 8
 VLAN Type: static
 Route Interface: configured
 IP Address: 172.16.27.220
 Subnet Mask: 255.255.255.0
 Description: manage
 Name: VLAN 0008
 Tagged   Ports:
    GigabitEthernet11/0/1
    Ten-GigabitEthernet2/0/1
 Untagged Ports:
    GigabitEthernet0/0/47

 VLAN ID: 12
 VLAN Type: static
 Route Interface: not configured
 Description: clients
 Name: VLAN 0012
 Tagged   Ports:
    GigabitEthernet11/0/1
    Ten-GigabitEthernet2/0/1
 Untagged Ports: none

 VLAN ID: 16
 VLAN Type: static
 Route Interface: not configured
 Description: phones
 Name: VLAN 0016
 Tagged   Ports:
    GigabitEthernet11/0/1
    Ten-GigabitEthernet2/0/1
 Untagged Ports: none

 VLAN ID: 2100
 VLAN Type: static
 Route Interface: not configured
 Description: radio
 Name: VLAN 2100
 Tagged   Ports:
    GigabitEthernet11/0/1
 Untagged Ports:
    GigabitEthernet0/0/1
    Ten-GigabitEthernet2/0/1

and heres my wireless module config -

[WlanAC1-Ten-GigabitEthernet1/0/1]display vlan all
 VLAN ID: 1
 VLAN Type: static
 Route Interface: configured
 Description: old_staff
 Name: VLAN 0001
 Tagged   Ports:
    Ten-GigabitEthernet1/0/1
 Untagged Ports:
    WLAN-ESS1                WLAN-ESS2                WLAN-ESS5
    WLAN-ESS6                WLAN-ESS7                WLAN-ESS8
    WLAN-ESS10               WLAN-ESS11               WLAN-ESS12

 VLAN ID: 2
 VLAN Type: static
 Route Interface: configured
 Description: staff
 Name: VLAN 0002
 Tagged   Ports:
    Ten-GigabitEthernet1/0/1
 Untagged Ports: none

 VLAN ID: 8
 VLAN Type: static
 Route Interface: configured
 IP Address: 172.16.27.221
 Subnet Mask: 255.255.255.0
 Description: manage
 Name: VLAN 0008
 Tagged   Ports:
    Ten-GigabitEthernet1/0/1
 Untagged Ports: none

 VLAN ID: 12
 VLAN Type: static
 Route Interface: configured
 Description: clients
 Name: VLAN 0012
 Tagged   Ports:
    Ten-GigabitEthernet1/0/1
 Untagged Ports: none

 VLAN ID: 16
 VLAN Type: static
 Route Interface: configured
 Description: phones
 Name: VLAN 0016
 Tagged   Ports:
    Ten-GigabitEthernet1/0/1
 Untagged Ports: none

 VLAN ID: 2100
 VLAN Type: static
 Route Interface: not configured
 Description: radio
 Name: VLAN 2100
 Tagged   Ports: none
 Untagged Ports:
    Ten-GigabitEthernet1/0/1

couple of questions -

why are all the wlan-ess all under vlan 1?

i have made them all a trunk and given them the same vlans and also added the pvid to vlan 2100 to each but why does it appear untagged under vlan 2100 and not the others?

also when i connect my wireless access points to my switch, do i make the port there plugged into untagged, tagged and what vlan do i put them on?

many thanks,

rob