Instruction/ maintenance manual of the product AIRCAP2602IAK9 Cisco Systems
Go to page of 520
Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Drive San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco IOS S of tw a re Conf iguration Guide f or Cisco Air onet A ccess P oints Cisco IOS Releases 15.
THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENT S, INFORMATI ON, AND RE COMMENDATIONS IN T HIS MA NUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED WI THOUT WARRANTY OF ANY KIND, E XPRESS OR IMPLIED.
1 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 CONTENTS Audienc e i-x ix Pur pose i-xx Organi zation i-xx Conv enti ons i-xxi Rela ted Publi cati ons i-xxiv Obta.
Cont ents 2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Gettin g Help 3-3 Abbrevi ating Comma nds 3-3 Using no an d defau lt Form s of Commands 3-4 Underst andi .
Content s 3 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Using th e Expre ss Securi ty Page 4-20 CLI C onfi gurat ion Exam ples 4-21 Config urin g System Po wer .
Cont ents 4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Defaul t TACACS+ Co nfigura tion 5-15 Config urin g TACACS+ Lo gin Authen ticati on 5-1 5 Config urin g T.
Content s 5 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Defaul t Banner Configur ation 5-35 Config urin g a Message -of-the -Day Lo gin Banner 5-35 Config urin .
Cont ents 6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Config urin g Transmit and Recei ve Antenn as 6-26 Enabli ng and Di sablin g Gratuit ous Pro be Response .
Content s 7 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 CLI C onfi gurat ion Exam ple 7-10 Displa ying Co nfigur ed BSSIDs 7-10 Assigni ng IP Redi rect ion for .
Cont ents 8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Confi guri ng Ot her Acce ss P oint s to U se the Local Au thenti cato r 9-6 Config urin g EAP-FAST Set t.
Content s 9 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Applyi ng an EAP Pr ofile t o the Fas t Etherne t Interf ace 11-18 Applyi ng an EAP Pr ofile t o an Upli.
Cont ents 10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Config urin g Access Poi nts to Partici pate in WIDS 12-29 Config urin g the Access Point f or Scanner M.
Content s 11 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 CHAPTER 14 Configur ing V LANs 14-1 Underst anding VL ANs 14-2 Rel ated D ocu me nts 14-3 Incorp orat i.
Cont ents 12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Config urin g Filter s Using the CLI 16-2 Config urin g Filt ers Using t he Web -Browser Inter face 16-3.
Content s 13 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 SNM P Exa mples 18-10 Displa ying SNMP Stat us 18 -12 CHAPTER 19 Configur ing R epeater a nd Sta ndby A.
Cont ents 14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Dele ting F iles 20-5 Creati ng, Di splayi ng, and Ext racting tar Fi les 20-5 Creati ng a tar F ile 20-.
Content s 15 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Browser HTTP I nterfac e 20-32 Brow ser TFT P Inte rfac e 20-33 CHAPTER 21 Configur ing Syst em Message.
Cont ents 16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Using th e CLI 22-25 Reloadi ng the Access Po int Im age 22-2 6 Using th e MODE but ton 22-27 Using th e.
xix Cisco IO S Softw are Conf iguratio n Guid e for C isco Aironet Acces s Poin ts OL-21881-03 Preface Revised: August 30, 2012 OL-2188 1-03 Audience This gu ide i s for the net working pr ofessiona l wh o instal ls and manage s Cisco Aironet Access Points.
xx Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Pref ace Purpose Purpose This guid e provides the informa tion you need to insta ll and configur e your acce ss point.
xxi Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Pre face Convent ions Chapter 12, “Con figuring W DS, Fast Secu re Ro aming, Radio Manag ement, and Wireless I.
xxii Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Pref ace Conv ent ions Inter acti ve exam ples use th ese con ven tions: • T erminal sessions and system displays are in scree n font. • Informa tion y ou e nter is in boldface sc reen font.
xxiii Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Pre face Convent ions Warnung Dieses Warnsymbol b edeutet Gefahr .
xxiv Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Pref ace Related Publi cations Related Publications These do cuments p rovide complete informati on about the ac.
C HAPTER 1-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 1 Overview Cisco Air onet Acces s Points (h ereaft er called access p oints ) pro v ide a secure, af for.
1-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Ch apter 1 Over vi ew Feature s • The 13 00 series outdoor ac cess poi nt/bridg e uses an integrat ed ante nna and c an be configur ed to us e extern al, du al- diversity ante nnas .
1-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Ov erview Features Note Cisc o IOS Release 12.4(25d) J A suppo rts the Cisc o 3201 W ireless Mo bile Interfa ce Card (WM IC) in th e 3200 Series Mobil e Access Router (MAR).
1-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Ch apter 1 Over vi ew Managem ent Opt ions Manage ment Options Y ou can use the wirel ess device management syste.
1-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Ov erview Network Configuration Examples Figur e 1 -1 A ccess P oints as Root Units on a Wir ed LAN Rep.
1-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Ch apter 1 Over vi ew Netwo rk Configura tion Examp les Bridges The 1140 , 1200 , 1240 , and 1250 series a ccess p oints a nd the 1300 a ccess p oint/bri dge ca n be configured as ro ot or n on-roo t bri dges.
1-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Ov erview Network Configuration Examples you can conn ect the printers to a hub or to a switch, co nnect the hub or switc h to the access point Eth ernet port, and configure t he acce ss point as a workg roup bri dge.
1-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Ch apter 1 Over vi ew Netwo rk Configura tion Examp les.
CH A P T E R 2-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 2 Using the Web-Browser Interface This ch apter descr ibes th e web- browser int erface that you c an use to c onfigure t he wir eless device.
2-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Using the Web-Br owser In terfac e for th e First Time Using the Web-Browser In terface for the First T ime Use the wire less device IP address to browse to the mana gement system.
2-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Using th e Manage ment Page s in the We b-Browser Interfa ce Using Action Buttons Ta b l e 2 - 1 lists the p age l inks an d buttons tha t app ear on most ma nagem ent pa ges.
2-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Enabling H TTPS for Secure B rowsing Characte r Restriction s in En.
2-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Enab li ng HT TPS f or S ecu re Br ow sing Figur e 2-2 Expr ess Setup P age Step 3 Enter a name for the a ccess p oint in the System Name f ield an d click A pply .
2-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Enabling H TTPS for Secure B rowsing Figur e 2-3 Services – DNS P age Step 5 Select Enable for Dom ain Name System. Step 6 In the Domai n Na me field, e nter your compa ny domain nam e.
2-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Enab li ng HT TPS f or S ecu re Br ow sing Step 10 Browse t o the Se rvices: HTT P W eb Server page.
2-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Enabling H TTPS for Secure B rowsing Step 14 Another warning win dow a ppears stating that the access point sec urity certif icate is vali d but is not fro m a kno wn source.
2-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Enab li ng HT TPS f or S ecu re Br ow sing Figur e 2-7 Cer tificate Windo w Step 16 On the Certif icate window , click Install Cert if icate .
2-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Enabling H TTPS for Secure B rowsing Figur e 2-8 Cer tificate Impor t Wizar d Window Step 17 Click Next . The ne xt windo w asks wher e you w ant to stor e the c ertif icate.
2-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Enab li ng HT TPS f or S ecu re Br ow sing Figu re 2-1 0 Certif ica te Compl et ion W ind ow Step 19 Click Finis h . W indows displays a f inal security warning.
2-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Enabling H TTPS for Secure B rowsing Figur e 2-12 Impor t Successfu l Window Step 21 Click OK . Step 22 On the Certifica te windo w sho wn in Figure 2- 7 , which is still disp layed, c lick OK .
2-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web -Brow ser Inter face Using Online Help Using Online Help Click the help icon at the top of any page in the web-bro wser interface to di splay online help.
2-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 2 Using t he Web- Browser Int erface Disabli ng the Web-B rowser Inte rface Ta b l e 2 - 2 sh ows an ex ampl e help locat ion and Hel p Root UR L for an 110 0 series access po int.
CH A P T E R 3-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 3 Using the Command-Line Interface This chap ter de scribe s the Cisco IOS co mmand -line inte rface (CLI) th at you can us e to conf igure th e wirele ss device.
3-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 3 Usi ng th e Com man d-L ine I nter face Cisco IOS Comm and Mode s Cisco IOS Command Modes The Cisco IOS user interfa ce is di vided into m any d if ferent mod es.
3-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Comma nd-Line In terface Getting Help Getting Help Y ou can enter a ques tion mark (? ) at the sy stem prom pt to di splay a lis t of comm ands a v ailable for eac h comma nd mode .
3-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 3 Usi ng th e Com man d-L ine I nter face Using no and default Forms of Comman ds Using no and defa ult Forms of Commands Most co nf igurati o n comm ands also hav e a no fo rm.
3-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Comma nd-Line In terface Using Com mand History Changing the Command History B uffer Size By default , the wire less device record s ten comm and l ines in its history buffer .
3-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 3 Usi ng th e Com man d-L ine I nter face Using E diting Feature s Using Editing Fea tures This secti on descri bes the ed itin g features t hat can hel p you manip ulate the command line.
3-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Comma nd-Line In terface Using Edit ing Featu res Editing C ommand Lines that Wrap Y ou can use a wrapa round feature for commands t hat extend beyond a singl e line on the screen .
3-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 3 Usi ng th e Com man d-L ine I nter face Searching and Filtering O utput of show and more Commands In this exam ple, the acce ss-list global configura tion com mand e ntry extend s beyond one line .
3-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Comma nd-Line In terface Acce ssi ng th e C LI Accessing the CLI Y ou can open the w ireless device CLI us ing T elnet or Secu re Shell (SSH). Opening the CLI with Telnet Foll ow these steps to open the CLI wit h T elne t.
3-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 3 Usi ng th e Com man d-L ine I nter face Access ing the CLI.
CH A P T E R 4-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 4 Configuring the Access Point for the First Time This c hapter d escrib es how to configure basic se ttings o n the wire less device for the first tim e.
4-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Before You Start • A system name for the wire less de.
4-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Loggi ng into th e Access Poi nt Step 7 Click the Rese t to Defaul ts b utton to reset all settings, including the IP addre ss, to factory defa ults.
4-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Obtain ing and As signing an IP Add ress • T elnet (i f the AP is config ured with an IP address) • console port Note Not all mo dels of Cisco Airon et Acc ess Points have the cons ole po rt.
4-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Connecting to the 1100 Series Access Point Locally D.
4-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Connec ting to the 11 30 Series Access Po int Local ly .
4-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Connecting to the 1300 Serie s Access Point/Bridg e Locally Step 3 When conn ected, pr ess enter or type en to access the comm and promp t.
4-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Def ault R adio Se ttin gs Default Radio Settings Beginning wi th Cisco IOS Releas e 12.3( 8)J A, access p oint r adios ar e di sabled and no default SSID is assigne d.
4-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Assigning Ba sic Setti ngs Figur e 4-1 Summary Stat us P age Step 5 Click Express Se tup . The Expr ess Setup scre en appears.
4-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Assigning B asic Settings Figur e 4-2 Expr ess Setup P.
4-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Assigning Ba sic Setti ngs Figur e 4-4 Expres s Set.
4-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Assigning B asic Settings Figur e 4-5 Expr ess Setup P age for the 13 00 Ser ies Access P oint/Br idge Step 6 Enter the co nfiguration se ttings you obtained from you r system ad ministra tor .
4-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Assigning Ba sic Setti ngs • IP Addr ess —Use this setting to assign or change the wirele ss device IP address.
4-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Assigning B asic Settings • Optimi ze Radio Netw ork.
4-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Assigning Ba sic Setti ngs IP Subne t Mask Assigned by DHCP by d efault; i f DHCP i s disable d, the d efault setting is 255.
4-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing Basi c Security Settings Configuring Basi.
4-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Config uring Basi c Security Set tings Understanding Expr ess Security Settings The SSID s that y ou cr eate u sing th e Expr ess sec urity page appe ar in t he SSID ta ble at the bo ttom o f the page.
4-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing Basi c Security Settings Express Security Types Ta b l e 4 - 2 describe s the four sec urity types that you can assign to an SSID.
4-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Config uring Basi c Security Set tings EAP Authentica tion This option enables 802. 1X authentica tion (such as LEAP , PEAP , EAP-TLS, EAP-F AST , EAP-TTLS, EAP-GTC, EAP-SIM, a nd othe r 802.
4-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing Basi c Security Settings Express Security.
4-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Config uring Basi c Security Set tings CLI Configur.
4-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing Basi c Security Settings ! interface Dot1.
4-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Config uring Basi c Security Set tings Exam ple: EA.
4-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing Basi c Security Settings ! interface Dot11Radio0/1.
4-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Config uring Basi c Security Set tings aaa new-model ! ! aaa group server radius rad_eap server 10.91.
4-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Confi guring Syste m Pow er Set tings fo r 104 0, 1130.
4-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Configuri ng System Power Sett ings for 1040 , 1130, 1140, 1240, 1250, and 1260 Serie s Access Points Using a Switch That Does Not Support IEEE 802.
4-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Assigni ng an IP A ddress Us ing the CLI T able 4-3 Inline P ow er Options based on Ac cess P oint Radio Con figur ation 1.
4-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Using a Te lnet Sessi on to Access t he CLI Using a Telnet Se ssion to Access th e CLI Foll ow these step s to access the CLI b y using a T elnet session .
4-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing the 802.1X Supplicant Use the no form of the dot1x cr edentials com mand to negate a pa ramet er .
4-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring th e Acce ss Point for th e First Time Configuring the 802.
4-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configur ing the 802.1X Supplicant repeater-ap# config terminal Enter configuration commands, one per line.
CH A P T E R 5-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 5 Administering the Access Point This chap ter de scribe s ho w to admi nister the wireless de vice.
5-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Disabli ng the Mode B utton Disabling the Mode Button Y ou can disab le the mode button on access p oints having a c onsole port by using t he [no] bo ot mode-b utton comm and.
5-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Preventi ng Unautho rized Access to Your Access Poi nt Preventing Unaut.
5-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Protecting A ccess to Privileged EXE C Comman ds Default Password and Priv ilege Level Configuration Ta b l e 5 - 1 sho ws the d efault pa ssword and privilege level configuration.
5-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Prote cti ng Ac cess to Pri vile ged EXEC Comm and s This exam ple s ho ws ho w to chan ge th e enable passw ord to l1u2c3k4 y5 .
5-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Protecting A ccess to Privileged EXE C Comman ds Protecting En able an.
5-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Prote cti ng Ac cess to Pri vile ged EXEC Comm and s If bo th the en able and enable secret passw ords ar e def ined, users must en ter the enable se cret pas swor d.
5-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Protecting A ccess to Privileged EXE C Comman ds T o disable usernam e aut henticat ion fo r a sp ecif ic user , u se the no username name glob al co nf igur ati on comm and.
5-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Controlling Access Point Access with RADIUS When y ou set a comman d to a p ri vile ge le vel, all comm ands wh ose sy ntax is a subset of tha t comman d are al so set to that le vel.
5-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Con troll ing Acce ss Po in t Acce ss wi th R ADI US RADIUS provides detai led accou nting i nform ation and fl exible admi nistrat ive contro l over authenti cation and au thorizatio n processes.
5-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Controlling Access Point Access with RADIUS T o disa ble A AA, u se t he no aaa new-model global co nfiguration comm and.
5-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Con troll ing Acce ss Po in t Acce ss wi th R ADI US Defining AAA Se rver Grou ps Y ou can configure the wire less device to use AAA s erver grou ps to group existing server h osts f or authenti cation.
5-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Controlling Access Point Access with RADIUS Step 3 radius-server host .
5-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Con troll ing Acce ss Po in t Acce ss wi th R ADI US T o remove th e specifie d RADIUS serve r , u se the no radius-ser ver host hostname | ip-add r ess global configurati on comm and.
5-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Controlling Access Point Access with TACACS+ T o disable au thoriz ation , use the no aaa aut horizati on { network | exec } method1 gl obal c onfigurat ion comm and.
5-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Con troll ing Acce ss Po in t Acce ss wi th T ACAC S+ authe nticat ion methods a re perfor med. The only exceptio n is the defaul t method l ist (whic h, by coin cide nce, is n amed defaul t ).
5-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Controlling Access Point Access with TACACS+ T o disa ble A AA, u se t he no aaa new-model global co nfiguration comm and.
5-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configur ing Ethernet Sp eed and Dupl ex Settings Configuri ng Ethernet Sp eed and Duple x Settings Y ou can assign the wire less device Etherne t port spee d and dupl ex settings.
5-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Configuring the Access Point for Local Authentica tion and Authorizati.
5-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configur ing the Au thentication Ca che and Pro file T o disa ble A AA, u se t he no aaa new-model global co nfiguration comm and.
5-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Configuring the Authentication Cache and Profile ! aaa group server tacacs+ tac_admin server 192.
5-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configuring the Access Point to Provide DHCP Service ! ip http server ip http authentication aaa no ip http secure-server ip http help-path http://www.
5-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Configuring the Access Point to Provide DHCP Service Note When yo u configure the ac cess point as a DHCP server , it assi gns IP addresse s to devices on its subnet.
5-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configuring the Access Point to Provide DHCP Service Use the no form of these command s to return to default sett ings.
5-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Configuring the Access Point for Secure Shell Clear Commands In pri vileged Exec mode, use the co mmands in Ta b l e 5 - 3 to clea r DHCP serv er va riab les.
5-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configuring Client ARP Cachi ng Note The SSH feature in this software relea se does not support IP Security (IPsec). Configuring SSH Before configuring SSH, download th e cryp to soft ware image from C isco.
5-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Mana gi ng th e S ystem Tim e an d Da te Configuring ARP Caching Begin.
5-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Managin g the Syste m Time and Date http://www .cisco.com/en/US/produc ts/sw/iosswrel/ps1831/pro ducts_configuration_gu ide_chapter0918 6a00800c a66f.
5-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Mana gi ng th e S ystem Tim e an d Da te Begi nning in pri vile ged EXEC m ode, follo w these steps t o set the s ystem cloc k: This example shows ho w to manually set th e system cloc k to 1:32 p.
5-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Managin g the Syste m Time and Date The minutes-of fset variable in t.
5-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Mana gi ng th e S ystem Tim e an d Da te The first part of the clock summer -time glob al conf iguration co mmand specif ies when summer time beg ins, and the second par t speci fi es when i t end s.
5-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Defining HTT P Ac cess Defining HTTP Acce ss By def ault, 80 is use d for HTTP acc ess, and port 443 is used for HTTPS acces s.
5-33 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Confi guring a S ystem Name an d Prompt When yo u set the syste m name, it i s also use d as the system prompt . T o return to the default host name, use the no hostname glob al configur ation comma nd.
5-34 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configur ing a System Nam e and Prom pt Setting Up DNS Beginning in p.
5-35 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Creat ing a Bann er T o remove a domain n ame, use the no ip domain-name name globa l configurat ion comm and.
5-36 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Creating a Banner Beginning in privileged EX EC mode, fol low these steps to con figure a MOTD login banner: T o delete the MO TD banner , use the no banner motd g lobal c onfiguration com mand.
5-37 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode Configurin g a Lo gin Bann er Y ou can configure a login banne r to ap pear on all c onnect ed termin als.
5-38 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Migrati ng to Japan W 52 Do main The fo llowing int erface globa l co nfiguration mode CLI c omma nd is used t o migra te a n acce ss point 802.
5-39 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Adm inistering the Access Point Configuring Multiple VLAN and Rate Limiting for Point-to -Multipoint B.
5-40 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Admin istering the Access Poin t Configur ing Multiple VL AN and Rate L imiting for Po int-to-Mul tipo.
CH A P T E R 6-1 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 6 Configuring Radio Settings This chapter describe s how to configure radio settin gs for the wireless de vice.
6-2 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling the Radio Interface Enabling the Radio Interface The wireless de vice radios are disabled b y default. Note Beginning wit h Cisco IOS Release 12.
6-3 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Ro le in Radio Netw ork Y ou can also configure a fallback role for root access points.
6-4 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Role in Radio Network Step 3 station-role non-root {bridge.
6-5 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Ro le in Radio Netw ork Note When you enable the role in th.
6-6 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Role in Radio Network • Outdoor MIMO bridging usi ng external antennas has not been ful ly tested and is not fully supported with this release.
6-7 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Ro le in Radio Netw ork Radio Tracking Y ou can conf igure the access point to track or monitor the status of one of it s radios.
6-8 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Data Rates Bridge Features Not Supported The follo wing .
6-9 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuri ng Radio Data Rates to be made based on reso urces av ailable to the wireless project, type of traf fic the users will be passing, service lev el desired, and as always, the qu ality of the RF en vironment.
6-10 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Data Rates Step 3 speed 802.11b, 2.4-GHz radio: {[ 1.0 ] [ 11.0 ] [ 2.0 ] [ 5.5 ] [ basic-1.0 ] [ basic-11.
6-11 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring MCS Rates Use the no form of the speed command to remov e one or more data rates from the conf iguration. This exam ple sho ws how t o remov e data rates basic-2.
6-12 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Transmit Powe r MCS rates are confi gured using the speed command. The follo wing example sho ws a speed setting for an 802.
6-13 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radi o Transmit Power Step 2 Click T echnical Support & Documentation . A small windo w appears contai ning a list of technical support links.
6-14 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Transmit Powe r Use the no form of the po wer command to return the p ower setting to maximum , the def ault setting.
6-15 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radi o Transmit Power Limiting the Power Level for Associated Client Devices Y ou can also limi t the po wer le vel on cli ent de vices that associate to the wireless d evice.
6-16 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radi o Channel Settings Use the no form of the client power comman d to disable the maximum po wer level for associat ed clients.
6-17 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings Because they change frequent ly , channel settings are not incl uded in this document.
6-18 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radi o Channel Settings Dynamic Frequency Selection Access po.
6-19 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings If radar is detected on a manually conf igured DFS channel, the channel will be changed automatically and will not return to the configured channel.
6-20 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radi o Channel Settings Confirming that DFS is Enabled Use the show controllers dot11radio1 command to conf irm that DFS is enabled.
6-21 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings The follo wing e xample conf igures the.
6-22 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Loca tion-Based Services This exampl e sho ws how to unb lock all frequencies for DFS: ap(config-if)# no dfs band block Setting the 802.
6-23 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Location-Based Service s Figur e 6-2 Basic LBS Networ k Configuration The access points that you conf igure for LBS should be in the same vicinity .
6-24 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling World Mode In this e xample, the prof ile southside is enabled on the access po int 802.11g ra dio: ap# configure terminal ap(config)# dot11 lbs southside ap(dot11-lbs)# server-address 10.
6-25 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Disabling and Enabling Short Radio Preambles Use the no form of the command to disable world mode.
6-26 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Transmit and Receive Antenna s Short preambles are enabled by default. Use the preamble-short command to enab le short preambles if they are disa bled.
6-27 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disab ling Gratuitous Probe Resp onse Enabling and Disabling .
6-28 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Disabling and Enabling Aironet Extensions (config-if)# probe-response gratuitous speed 12.0 (config-if)# probe-response gratuitous period 30 speed 12.
6-29 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Ethernet Encaps ulation Transformation Method Configuring the Ethernet Encapsulation Transformation Method When the wireless device recei ves data packets that are not 802.
6-30 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling Public Secure Pa cket Forwarding Note This feature is best sui ted for use with stati onary workgr oup bridges.
6-31 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling Publ ic Secure Packet Forwa rding PSPF is disabled b y default. Be ginning in privil e ged EXEC mode, follo w th ese steps to enable PSPF: Use the no form of the command to disable PSPF .
6-32 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Beaco n Period and the DTIM Configuring the Beacon Period and the DTIM The beacon period is the amount of time between acc ess po int beacons in Kilomicroseconds.
6-33 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuri ng the Maxi mum Data Retries Use the no form of the command to reset the R TS settings to def aults.
6-34 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling Short Slot Tim e for 802.11g Radios Use the no form of the command to reset the setting t o defaults. Enabling Short Slot Time for 802.
6-35 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics The Stream page appears.
6-36 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Viewing Voice Reports Y ou can use a browser to access voice reports listing V oWLAN metrics stored on a WL SE.
6-37 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics • T o view a graph of v oice bandwidth in use during the last hour , choose Bandwidth In Use (% Allowed) from the Report Name drop-do wn menu.
6-38 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figur e 6-6 V oice Str eaming Progr ess Viewing Wireless Client Reports In addition to vie wing voice reports from an access point perspective, you can vie w the m from a client perspective.
6-39 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figur e 6-7 Wireless Client Metr ics Viewing Voice .
6-40 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figur e 6-8 V oice F ault Summary Configuring Voic.
6-41 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figure 6-9 V oice Qo S Settings Configuring Voice F.
6-42 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring ClientLink Configuring ClientLink Cisco ClientLink (referred to as Beam Fo rming) is an intelligent b eamforming technology th at directs the RF signal to 802.
6-43 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Debugging Radio Func tions This exampl e sho ws how to begin d ebu gging o.
6-44 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Debugging Radio Functions.
CH A P T E R 7-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 7 Configuring Multiple SSIDs This chapte r describes ho w to conf igure and manage multip le service set identif iers (SSIDs) on the acces s point.
7-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Unde rst and ing Mu lt iple S SID s Understandin g Multiple SSIDs The SSID i s a unique identif ier th at wireless networkin g de vices use to estab lish and mainta in wireless connect ivi ty .
7-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Understanding Multiple SSIDs Cisco IOS Releas e 12.3(10b)J A supports conf iguration of SSID parameters at the interface le vel on the CLI, b ut the SSIDs ar e stored in g lobal mode .
7-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Config uring Mu ltiple S SIDs Configuring Multi ple SSIDs These secti ons c.
7-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Configuring Multiple SSIDs Step 3 authe ntic ation clie nt usern ame usern.
7-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Config uring Mu ltiple S SIDs Note Y ou use the ssid command au thentic atio n options to co nfigure an aut hentica tion type for each SSID .
7-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Configuring Multiple SSIDs ssid buffalo vlan 7 authentication open Ho we v.
7-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Config uring Mu ltiple Basic SSIDs Configuri ng Multiple Basic SSI Ds Access po int 8 02.11a, 802.1 1g, and 802.1 1n radi os sup port up to 8 b asic SSID s (BSSID s), whic h ar e similar to MA C addresses.
7-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Confi guring Mult iple Ba sic SSIDs Figur e 7 -1 Global SSID Manag er P age Step 2 Enter the SSID name in the SSID fie l d . Step 3 Use the VLAN drop-down menu to se lect the VLAN to whi ch the SSID is assigne d.
7-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Config uring Mu ltiple Basic SSIDs Step 7 (Optional) In the Multiple BSSID Beacon Settings sectio n, select the Set SSID as Guest Mode check box to include the SSID in beacons.
7-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Assigning IP Redirection for an SSID Assigning IP Redirection for an SSID.
7-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs Assigning I P Redirectio n for an SSID Guidelines for Using IP Redirection.
7-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs Inclu ding an SSID in an SS IDL IE This exam ple sh ow s ho w to conf igur e IP re directio n only for pack ets sent to the specif ic TCP and UDP ports specif ied in an A CL applied to the BVI1 interfa ce.
7-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs NAC Suppor t for MBSSID N A C is d esigned specifically to help ensur e th.
7-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs NAC Support for MBSSID A new keyword, backup , is added to the existi ng .
7-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs NAC Suppor t for MBSSID Configuring NAC for MBSSID Note This feature supports only Layer 2 mobility within VLANs. La yer 3 mobility using ne twork ID is not supported i n this feature .
7-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Conf iguring Multip le SSIDs NAC Support for MBSSID authentication open authentication network-eap eap.
7-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Mu ltiple SSIDs NAC Suppor t for MBSSID.
CH A P T E R 8-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 8 Configuring Spanning T ree Protocol This ch apt er descib es how to co nfigure Span ning T ree Prot ocol ( STP) on your ac cess poi nt.
8-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Underst anding Spa nning T ree Protocol Understandin g Spannin g Tree Protocol This se ction describe s how spanni ng-tre e fea tures work.
8-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Unde rsta ndin g Sp annin g Tr ee P rotoc ol The access p oint maintains a separate spann ing-tree insta nce for each a ctiv e VLAN conf igured on it.
8-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Underst anding Spa nning T ree Protocol When a access point r.
8-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Unde rsta ndin g Sp annin g Tr ee P rotoc ol Spannin g-Tr ee Timers Ta b l e 8 - 1 desc ribes the t imers that affect the en tir e span nin g-tree perf orma nce.
8-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Underst anding Spa nning T ree Protocol it can create temp orary data loops. Interfa ces m ust wait for new top ology informa tion to prop agat e through the LAN before starting to forw ard frames.
8-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Unde rsta ndin g Sp annin g Tr ee P rotoc ol 2. While spannin g tree w aits t he forwar d-delay timer t o expi re, it mov es the interfa ce to th e learnin g stat e and resets the forw ard- delay timer .
8-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Configur ing STP Feat ures Forwarding State An interf ace in th e forw ardin g state f orwar ds frame s. The inte rf ace enter s the for wardi ng state from th e learni ng state.
8-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Configuring STP Features The ra dio and Et hernet interfac es a nd the native VLAN on the a ccess p oint a re assi gned to bri dge group 1 by default.
8-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Configur ing STP Feat ures STP Configu ration Ex amples Thes.
8-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Configuring STP Features Non-Root Bridge Wi thout VLANs This exam.
8-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Configur ing STP Feat ures ! interface Dot11Radio0 no ip address no ip route-cache ! ssid vlan1 vlan 1 infrastructure-ssid authentication open ! speed basic-6.
8-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spa nning Tree Pro tocol Configuring STP Features bridge 2 priority 10000 bridge 3 protoco.
8-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 8 Conf igur ing S pan ning Tree Pro toco l Displaying Spanning-T ree Status encapsulation dot1Q 1 native no ip route-cache bridge-group 1 ! interface FastEthernet0.
CH A P T E R 9-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 9 Configuring an Access Poin t as a Local Authentic ator This ch apter de scrib es ho w to co nf igu.
9-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Lo cal Authenticator Underst andin g Local Au thentic ation Understandin g Local Authen tication Many small wire less LANs that could be made more secure wit h 802.
9-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Aut henticator Confi guring a Loc a l Authent icat or Guidelines.
9-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Lo cal Authenticator Configur ing a Lo cal Authe ntica tor Step 3 radi us- server l oca l Enable the access point as a loca l authent icator an d enter conf iguration mod e for the authentica tor .
9-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Aut henticator Confi guring a Loc a l Authent icat or This e xam.
9-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Lo cal Authenticator Configur ing a Lo cal Authe ntica tor AP(config-r.
9-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Aut henticator Confi guring a Loc a l Authent icat or Each ti me.
9-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Lo cal Authenticator Configur ing a Lo cal Authe ntica tor In th is ex.
9-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Aut henticator Confi guring a Loc a l Authent icat or Limiting t.
9-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Lo cal Authenticator Configur ing a Lo cal Authe ntica tor The seco nd section lists sta ts for each ac cess point (N AS) authoriz ed to use the local au thentic ator .
CH A P T E R 10-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 10 Configuring Cipher Suites and WEP This chapte r des cribes ho w to conf igure the c ipher suites.
10-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cip her Su ites and W EP Underst anding Cipher Suites and W EP Understandin g Cipher Suit es and WEP This se ction de scribe s how WEP an d ciph er suite s prote ct tra ff ic on you r wir eless LA N.
10-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cipher Suite s and WEP Config uring C ipher Suit es and WEP • TKIP (T e mporal Ke y In.
10-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cip her Su ites and W EP Configuring Cipher Suites an d WEP Beginning in privileged EXEC.
10-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cipher Suite s and WEP Config uring C ipher Suit es and WEP WEP Key Restrictions T able 10-1 lists WEP key restriction s based on your sec urity configura tion.
10-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cip her Su ites and W EP Configuring Cipher Suites an d WEP Note If you enab le MIC but .
10-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cipher Suite s and WEP Config uring C ipher Suit es and WEP Use the no fo rm of the e ncryp tion co mman d to disable a ci pher suite.
10-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cip her Su ites and W EP Configuring Cipher Suites an d WEP Note If using W P A a nd CCKM as key manageme nt, onl y tkip and a es ci phers a re suppor ted.
10-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cipher Suite s and WEP Config uring C ipher Suit es and WEP Beginn ing in pri vileg ed EXEC mode, follo w these steps to enable broadcast k ey rotation: Use the no fo rm of the e ncrypt ion co mman d to disable broa dcast key rotatio n.
10-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configur ing Cip her Su ites and W EP Configuring Cipher Suites an d WEP.
CH A P T E R 11-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 11 Configuring Authentication Types This c hapter des cribe s ho w to conf igure auth enticatio n type s on the ac cess poi nt.
11-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Underst andin g Authent ication Types Understandin g Authentica tion Types This secti on descri bes the au thent icatio n types that you can co nfigure on the acce ss point.
11-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Underst anding Auth enticat ion T ypes Figur e 1 1 -1 Sequence fo r Open A uthentication Shared Key Authenticatio n to the Ac cess Poin t Cisco pro vides shared ke y a uthenticati o n to comply with th e IEEE 802.
11-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Underst andin g Authent ication Types EAP Authentication to the Network This a uthent ication type p rovides the high es t lev el o f securit y fo r your wirel ess networ k.
11-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Underst anding Auth enticat ion T ypes There is more th an one t.
11-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Underst andin g Authent ication Types Figur e 1 1 -4 Sequence f or M.
11-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Underst anding Auth enticat ion T ypes Figure 11-5 shows the reassociation process using CCKM.
11-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Underst andin g Authent ication Types Figure 11-6 shows the WP A key managem ent proces s.
11-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Underst anding Auth enticat ion T ypes T o support the security .
11-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configur ing Authe nticati on Types Note Whe n you configure TKIP -.
11-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Configuring Authentication Types Step 3 authe ntic ation ope n [ mac-addre ss list-name [ alte rnate ]] [[ optional ] eap list-n am e ] (Optional) Set th e authenticatio n type to open for this SSID.
11-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configur ing Authe nticati on Types Step 5 authe ntic ation ne twork-e ap list-name [ mac-addre ss list-name ] (Optional) Set th e authenticatio n type for the SSID to Network- EAP .
11-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Configuring Authentication Types Use the no form of the SSID comman ds to di sable the SSID or to dis able SSID feat ures.
11-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configur ing Authe nticati on Types Configuring Additional WPA Set tings Use two o ptional settings to co nfigure a pre -sha red key on the a ccess po int an d adjust the fre quen cy of group key updates .
11-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Configuring Authentication Types This exam ple shows how to con.
11-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configur ing Authe nticati on Types This e xample sho ws how to ena.
11-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Configuring Authentication Types Use the no form of th ese comman ds to reset the v alues to d efault settings. Creating and Applying EAP Method Profiles for the 802.
11-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configur ing Authe nticati on Types Creating an EAP Metho d Profile Beginning in privileged exec mod e, foll ow these steps t o define a new EAP profile: Use the no command to nega te a command or set its def aults.
11-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Matching Access Point and Client Device Authentication Types Applying an EAP P rofile t o an Up link SSID This ope ration typ ically appli es to repeat er acce ss points.
11-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Matchi ng Access Point and Clien t Device Authentica tion Type s f .
11-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 1 Configuring Au thentica tion Type s Matching Access Point and Client Device Authentication Types 802.1X auth entic ation and CCKM Enable LEAP Sele ct a cip her suite and ena ble Network-EAP a nd CCKM for the SSID Note T o all ow both 802.
11-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Matchi ng Access Point and Clien t Device Authentica tion Type s EA.
CH A P T E R 12-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 12 Configuring WDS, Fast Secure Roamin g, Radio Managemen t, and Wireless Intrusio n Detection Serv.
12-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Un.
12-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Serv.
12-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Un.
12-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Unde rsta ndin g Radio Mana geme nt device.
12-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Un.
12-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Confi guring WDS access points.
12-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Co.
12-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Confi guring WDS Figure 12-4 shows the requir ed configuratio n for each device that pa rticipat es in WDS.
12-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection C.
12-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Ser.
12-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Conf igurin g WDS Figur e 12-7 WDS Serv er Gro ups P age Step 10 Crea te a group of servers to be used for 802.
12-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Confi guring WDS Step 14 Con figure the list of servers to be used for 802.
12-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection C.
12-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Ser.
12-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Conf igurin g WDS Figur e 12-9 Netw or k Configuration P age Step 2 Click Add Entry unde r the AA A Client s table.
12-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Confi guring WDS Figur e 12-1 0 Add AAA Client P age Step 3 In the AAA Client Ho stname f ield, en ter the name of the WDS de vice.
12-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Conf igurin g WDS Step 9 Click U ser Setup t o brow se to the Use r Setup page.
12-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Confi guring WDS Step 13 Select Cisco Secure Da tabase from the Password Authent icatio n drop-down menu.
12-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection C.
12-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Ser.
12-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection C.
12-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Configuring Fast Secure Roaming Figur e 12-15 Global SSID Man ag er P age Step 6 On the SSID that supports CCKM, selec t these settings : b.
12-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Configur ing Manage ment Fra me Protec tion d. Select Mandatory or Optional und er Aut henti cated K ey Manageme nt.
12-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Managem ent F rame Protect ion Infrastructu re MFP provides Infrast ructure support.
12-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Managem ent Frame Protectio n Client MFP ca n be c onf igur ed as either requir ed or optiona l for a pa rticul ar SSID.
12-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Ser.
12-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Configur ing Radio Ma nagemen t Step 2 Click WDS to bro wse to t he General Se tup pag e.
12-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Ser.
12-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection C.
12-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 2 Configuring WDS , Fast Secure Ro aming, Radi o Managem ent, and Wir eless In trusion Detect ion Servi ces Configuring WLSM Failover Configuring Mon itor Mode Limits Y o u can conf igure threshold valu es that the access point u ses in monitor mode.
12-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configur ing WDS, Fa st Secur e Roami ng, Ra dio Mana gement, a nd Wirel ess Intru sion Det ection Configur ing WLSM Fa ilover the acti ve tunnels, which keeps data traf fic going between client and SUP .
CH A P T E R 13-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 13 Configuring RADIUS and TACACS+ Servers This ch apter descr ibes h o w to en able and conf igure .
13-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S Understanding RADIUS RADIUS is a distr ib uted clie nt/ser ver system that sec ures netw orks agai nst unauthorized acc ess.
13-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Figur e 13-1 Sequen ce fo r EAP A uthentication In Step s 1 thr ough 9 in Fi gure 13-1 , a wireless clien t de vice and a RADIUS serv er on the wire d LAN use 802.
13-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S A metho d list defines th e seque nce an d methods to be used to aut hen ticate , to auth orize, or to keep accoun ts on a user.
13-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Y ou iden tify R ADIU S sec.
13-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S Step 3 radius-server.
13-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS T o remove th e specifie d RADIUS serve r , u se the no radius-ser ver host hostname | ip-add r ess global configurati on c ommand.
13-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S T o disa ble A AA, u se t he no aaa new-model global co nfiguration comm and.
13-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Defining AAA Server Groups Y o u can c onfi gure t he access point to use AAA serv er groups to group e xisting serv er host s for authenti cation.
13-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S Step 3 radius-serve.
13-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS T o remove th e specifie d RADIUS serve r , u se the no radius-ser ver host hostname | ip-add r ess global configurati on comm and.
13-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S Beginn ing in pri v.
13-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Note Wh en WD S is co nfigured, P oD req ues ts sho uld be di rect ed to t he WDS .
13-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S T o disabl e acco unting, use the no aaa accountin g { net work | exec } { star t-stop } method 1.
13-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Configuring Settings for A.
13-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S This e xample sho w.
13-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS For a complete list of RAD.
13-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S T o delete the vendor-proprietary RADIU S host, use the no radius-serv er host { hostnam e | ip-a dd ress } non-standard global c onfigurat ion comm and.
13-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS Beginn ing in pri vileg ed.
13-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S RADIUS Attributes S.
13-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Configuring and Enabling RADIUS T able 13-4 At tribut es S.
13-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configur ing and Enab ling RADIU S Note By default, the access point sen ds reauthentica tion requests to the authenti cation server with the service-typ e attrib ute set to authe nticate-only .
13-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Conf igurin g and Ena bling TAC ACS+ Configuring and Enabl.
13-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configuring and Enabli ng TACACS+ TACACS+ Ope ration When an adm inistra tor att empts a simp le ASCI I login by authen tica ting to an ac cess point using T A CA CS+, thi s process occurs: 1.
13-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Conf igurin g and Ena bling TAC ACS+ This se ction c ontai.
13-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configuring and Enabli ng TACACS+ T o remov e the specif ied T A C A CS+ serv er name or add ress, use the no tacac s-s erver hos t hostnam e global configurat ion comm an d.
13-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Conf igurin g and Ena bling TAC ACS+ T o disa ble A AA, u se t he no aaa new-model global co nfiguration comm and.
13-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configuring and Enabli ng TACACS+ The aaa authorizatio.
13-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configur ing RADI US and TACA CS+ Servers Conf igurin g and Ena bling TAC ACS+ T o disabl e acco unting, use the no aaa ac counting { netw ork | exec } { s tart-stop } method1.
13-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Co nfig uring R ADI US and T ACAC S+ Serv ers Configuring and Enabli ng TACACS+.
CH A P T E R 14-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 14 Configuring VLANs This chapte r describes ho w to conf igure your access point to operate with the VLANs set up on your wired L AN.
14-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Underst anding VL ANs Understandin g VLANs A VLAN is a switched netw ork that is logically se gmented, b y functions, project teams, or ap plications rather than on a physical or geograph ical basis.
14-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 4 Configuring VLANs Unde rsta ndin g VLAN s Figur e 14- 1 LAN and VL AN Segmentatio n with Wir eless D.
14-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Conf igu rin g VLAN s Incorporating Wireless Devices into VLANs The ba sic wireless c ompon ents of a V LAN c onsi st of a n acce ss point and a cli ent ass ociat ed to it usi ng wireless te chnology .
14-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 4 Configuring VLANs Config uring VL ANs Configuring a VLAN Note Whe n you configure V LANs on acc ess po ints, the na tive VLAN must be VLAN1.
14-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Conf igu rin g VLAN s Step 3 ssi d ssid-string Create an SSID a nd ente r SSID co nfiguration mode fo r the new SSID. T he SSID ca n c onsist o f up t o 32 al phanume ric charac ters.
14-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 4 Configuring VLANs Config uring VL ANs This example shows how to: • Name an SSID • Assign the SSI.
14-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Conf igu rin g VLAN s Creating a VLAN Name Beginn ing in pri vileg ed EXEC mode, follo w these steps to assign a name to a VLAN: Use the no form of the c ommand to r emov e the name from the VLAN.
14-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 4 Configuring VLANs Config uring VL ANs Using a RADIUS Server for Dy namic Mobility Gr oup Assignment Y ou can configur e a R ADIUS s erver to dy namical ly assign mobilit y gro ups to use rs or us er groups.
14-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs VLAN Conf iguration Ex ample Virtual-Dot11Radio0 Protocols Configured: Address: Received: Transmitted: Bridging Bridge Group 1 201688 0 Bridging Bridge Group 1 201688 0 Bridging Bridge Group 1 201688 0 Virtual LAN ID: 2 (IEEE 802.
14-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 4 Configuring VLANs VLAN Confi guration Exam ple 4. Configure VLA N 1, the Manage ment V LAN, on both th e fastEthe rnet an d dot11 radio int erface s on the access point.
14-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs VLAN Conf iguration Ex ample T able 14-3 shows the results of the conf iguration commands in Ta b l e 1 4 - 2 . Use the show running comman d to display the r unning c onfigurat ion on the a ccess poi nt.
CH A P T E R 15-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 15 Configuring QoS This chapt er describes ho w to configur e quality of servi ce (QoS) on your ac cess point. W ith this feature, you can pro vide pr eferen tial tr eatment to cert ain traf fic a t the e xpense o f ot hers.
15-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Unde rstan din g QoS for W irele ss LA Ns Understandin g QoS for Wireles s LANs T.
15-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Understanding QoS for Wireless LANs QoS on the wir eless LAN focu ses on do wnstream p rioritization from the acce ss point. Figure 1 5-1 shows the up stream and downst ream t raff ic flow .
15-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Unde rstan din g QoS for W irele ss LA Ns Note This releas e conti nues to sup port existin g 7920 w ireless pho ne firmware. D o not atte mpt to us e the new standard (IE EE 802.
15-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Confi guring Qo S Configuring QoS QoS is d isabled by de fault ( howev er , the rad io int erface always hon ors tagg ed 80 2.1P pa ckets even when you have not confi gured a QoS policy).
15-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Conf igurin g QoS Figur e 15-2 QoS P olicies P age Step 3 Wi t h <NEW> selected in the Create /Edit Polic y f ield, t ype a name f or the QoS polic y in the Po licy Na me entry field.
15-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Confi guring Qo S Step 4 If the pa ckets that you need to prioritiz e contain I P precedenc e informa tion in the IP h eader T OS f ield, select an IP preceden ce cla ssif ication from the I P Prece dence d rop- do wn men u.
15-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Conf igurin g QoS • Class Selector 1 • Class Selector 2 • Class Selector 3 .
15-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Confi guring Qo S Step 19 Click the Apply b u tton at the bot tom of the page to appl y the polic ies to the acc ess point por ts.
15-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Conf igurin g QoS IGMP Snooping When Inte rnet G roup Me mbershi p Protoc ol (IGMP) snooping is en abled o n a switch and a client roams from one ac cess point to ano the r , th e client s’ multi cas t session is dropp ed.
15-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Confi guring Qo S Figure 15-4 shows the Radio Acc ess Categories page. Dual-ra dio acce ss points have a Radio Access Categories page for each ra dio.
15-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS Conf igurin g QoS Note In this re lease, c lients are blocked f rom usin g an ac cess category w hen y ou sele ct Enabl e for Ad miss ion Control.
15-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S Confi guring Qo S Step 3 Enter the ma ximu m perce ntage of th e chann el to be use d for voic e in t he Max Channel Capacity (%) fie ld .
15-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS QoS Configura tion Examp les QoS Configuration Exa mples These sec tions descr i.
15-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 5 Configuring Qo S QoS Conf igurat ion Ex amples Figur e 15-5 QoS P olicies P age f or V oice Examp le The ne twork admi nis trato r als o enab les th e QoS element for wir eless phones setting on the QoS Policies - Adv anced page.
15-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 15 Conf igur ing Q oS QoS Configura tion Examp les Figur e 15-6 QoS P olicies P age f or V ideo Exam p.
CH A P T E R 16-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 16 Configuring Filters This chap ter describes ho w to configu re and manage MA C address, IP , and E thertype f ilters on the access point usi ng th e web- browser int erface.
16-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Underst anding F ilters Understandin g Filters Protocol filters (IP pr otocol, IP por t, and Ethe rtype) pre vent or allow the use of specific protoc ols through the ac cess poin t’ s E therne t and radio p orts.
16-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface Configuring Filters Using the Web-Browser Interface This sect ion describes how to conf igure and enable f ilter s using the web-bro wser interface .
16-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce Figur e 16-1 MAC A ddr ess Filt ers P ag e Foll ow this lin k path to reach the Address Filters page: 1.
16-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface Step 5 Use the M ask entry f ield to indicate how man y bits, f rom left t o right, the fi lter che cks aga inst the M A C address.
16-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce If clients ar e not filtere d immedia tely , c lick Reload on the System Configurati on page to re start the access point.
16-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface Step 3 Click Adv anced Security to browse to the Advan ced Security: MA C Address Authenticat ion page.
16-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce Step 6 Click A pply . Creating a Time -Based AC L T ime-based A CLs are A CLs that ca n be enabled or di sabled for a specif ic period of time.
16-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface ACL Logging A CL logging is not support ed on the br idging int erfaces of AP platf orms.
16-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce Figu re 16-6 IP F ilters Page Foll ow this link path to reach the IP Fil ters page: 1.
16-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface Creating an IP Filter Foll ow th ese steps to create an IP f ilter: Step 1 Foll ow th e link path to the IP Filters page.
16-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce Step 15 When the filt er is complet e, click Appl y .
16-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 6 Configuring Fi lters Configuring Filters Using th e Web-Browser Interface Figu re 16-8 Et herty pe Fi lters Pag e Foll ow th is link path to reach the Ethertype Filte rs page: 1.
16-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapt er 16 Config uring Fil ters Con figur ing Filt ers Us in g the Web -Brow se r Inter fa ce Step 7 Click Add . The Ethertype ap pears in the Filte rs Classes f ield.
CH A P T E R 17-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 17 Configuring CDP This c hapter d escrib es how to configure Cisco Discovery Protoco l (CD P) on your ac cess poi nt.
17-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 17 Co nfigu ring CD P Underst anding CD P Understandin g CDP Cisco Disc overy Protocol (CDP) is a device-discovery prot ocol th at run s on a ll Cisc o network equipment .
17-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 7 Configuring CDP Configuring CDP Use the no form of the CDP commands to return to the def ault settings.
17-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 17 Co nfigu ring CD P Monito ring and Mai ntainin g CDP This example shows how to enable C DP .
17-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 7 Configuring CDP Monitoring and Maintaining CDP Below are six examples of o utput from the CD P show .
17-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 17 Co nfigu ring CD P Monito ring and Mai ntainin g CDP Device ID: idf2-1-lab-l3.
17-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 7 Configuring CDP Monitoring and Maintaining CDP AP# show cdp neighbor Capability Codes: R - Router, T.
17-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 17 Co nfigu ring CD P Monito ring and Mai ntainin g CDP.
CH A P T E R 18-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 18 Configuring SNMP This chapt er describ es how to conf igure the Sim ple Network Mana gement Protocol (SNM P) on your acces s point.
18-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Underst anding SNM P Understandin g SNMP SNMP is an ap plicat ion-laye r protoc ol that provide s a message format for commu nicati on betwee n SNMP man agers an d agents .
18-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configur ing SNMP Underst andin g SNMP T able 18-1 lists the SNMP versions a nd security lev els supp.
18-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Underst anding SNM P SNMP Agen t Fun ctions The SNMP a gent responds to SNMP manager requests as follo ws: • Get a MIB v ariable —The SNMP agent be gins this function in response to a request from the NMS.
18-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configur ing SNMP Configuring SNMP Configuring SNMP This se ction de scribe s how to configure SNMP on your acces s point .
18-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Conf igurin g SNMP Configuring Community Strings Y ou use the SNMP commun ity str ing to define the r elationshi p bet ween the SNM P mana ger a nd the agent.
18-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configur ing SNMP Configuring SNMP T o disabl e acce ss for an SNM P commun ity , s et the commu nity string for that co mmunity to t he null string (d o not enter a value for th e communi ty string ).
18-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Conf igurin g SNMP Configuring SNMP-Server Hosts T o configur e the recipien t of a.
18-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configur ing SNMP Configuring SNMP Some noti fication type s cannot be c ontroll ed with t he s nmp -server en abl e global con figuration comm and, su ch as udp-port .
18-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Conf igurin g SNMP T o remove th e specifie d host from recei ving traps, use the no snm p- server ho st host globa l configurati on c ommand.
18-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configur ing SNMP Configuring SNMP This example shows how to assign the stri ngs open and ieee to SN.
18-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Co nfiguring SNMP Displaying SNMP Status AP(config)# snmp-server group admin v3 priv read iso write .
CH A P T E R 19-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 19 Configuring Repeater a nd Standby Access Po ints and Workgroup Bridge Mod e This chap ter de scribe s ho w to conf igure your acces s point as a rep eater , as a hot stan db y unit, or as a workgroup br idge.
19-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 19 Configuri ng Repeat er and S tandby Acc ess Point s and Wor kgroup Brid ge Mode Underst anding Rep e.
19-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 9 Configuring Repe ater and Stan dby Acces s Points and Workgroup Bridge Mode Confi guring a Repeater .
19-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapte r 19 Configuri ng Repeat er and S tandby Acc ess Point s and Wor kgroup Brid ge Mode Configur ing a Repeater A ccess Poin t Default Configuration Access points are co nf igured as root units b y default.
19-5 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Configuring a Repeater Acc.
19-6 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Aligning Antennas The f.
19-7 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Aligning Antennas Use the show dot11 antenna-alignment command to list the MA C addresses and signal level for the last 10 de vices that responded to the pr obe.
19-8 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Aligning Antennas Setti.
19-9 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Understanding Hot Standby Understanding Hot Standby Hot Standby mode designates an access point as a backup for another access point.
19-10 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Configuring a Hot Stan.
19-11 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Configuring a Hot Standby.
19-12 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Configuring a Hot Stan.
19-13 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Understanding Workgroup B.
19-14 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Understanding Wo rkgroup Bridge Mode Caution An access point in workgroup bridge mode can introd uce a bridge loop if you co nnect its Ethernet port to your wired LAN.
19-15 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Understanding Workgroup Bridge Mode Figure 19-2 sho ws an a ccess point in workgroup br idge mode.
19-16 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Understanding Wo rkgroup Bridge Mode bridges, t hat can ass ociate t o an access point or bridge.
19-17 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Workgroup Bridge VLAN Tagging The follo wing e xample sho ws ho w the command is used .
19-18 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Configuring Work group Bridge Mode In the upstream direction, WGB remo ves the 802 .
19-19 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Configuring Workgroup Bridge Mode This exampl e show s how to conf igure an 1100 series access point as a workgroup bri dge.
19-20 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Using Workgroup Bridge.
19-21 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Using Workgroup Bridges i.
19-22 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Using Workgroup Bridge.
19-23 Cisco IOS Software Configuratio n Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Poin ts and Workgroup Bridge Mode Using Workgroup Bridges i.
19-24 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 19 Configur ing Repeater and Stan dby Access Points and Workgroup Br idge Mode Using Workgroup Bridge.
CH A P T E R 20-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 20 Managing Firmwa re and Configura tions This ch apter descri bes how to mani pulate the Fla sh file syste m, how to copy con figuration files, a nd how to arch iv e (upload and down load) s oftwar e images .
20-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith the Flash F ile System Displaying Available File S.
20-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with the Flash File System Setting the Def ault File .
20-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith the Flash F ile System Creating and Remov ing Dire.
20-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with the Flash File System • From a start u p conf .
20-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith the Flash F ile System • For the T rivial Fil e T ransfer Protocol (TFTP), the synt ax is tftp: [[ // lo cation ] / dir ecto ry ] / ta r -file name .
20-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files Extracting a tar File T o ex.
20-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith Configur ation Files Y ou can co py ( dow nloa d ).
20-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files conf iguration is us ed. Ho we ve r , so me commands in the exi sting conf igurat ion might not be replace d or ne gated.
20-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith Configur ation Files Preparing to Download or Upl.
20-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files The conf iguration f ile do wnloads , and the comm ands ar e ex ecut ed as the f ile is parsed line -by-line .
20-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith Configur ation Files • The acce ss point fo rms a passwor d named use rname@ap name.
20-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files This exam ple shows how to copy a c onfiguration file named host1- confg from th e neta dmi n1 directory on the remot e server w ith a n IP a ddress of 172.
20-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith Configur ation Files This exam ple sh ows how to copy the runni ng con figuration file named ap2-c onfg to the netadmin1 directo ry on t he rem ote ho st wit h an IP addre ss of 172.
20-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files access to a server that supp orts the re mote she ll (rsh). (M ost UNIX syst ems suppo rt rsh.
20-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working w ith Configur ation Files ap1.company.com ap1 For more inform ation , refer to the docum entati on for your RCP server .
20-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Configuration Files %SYS-5-CONFIG_NV:Non-volatile store configured from host2-config by rcp from 172.
20-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images Deleting a Stored Config uration File Cautio n Y ou cannot restore a file after it has been de leted.
20-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images tar File Forma t of Images on a Server o r Cisco.co m Softw are image s located on a ser ver or do wnloaded f rom Cisco.
20-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images Note Y ou must restart the in etd daemon after modif ying the /etc/inetd.c onf and /etc /services files.
20-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images Note T o a void an uns uccessf .
20-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images The algor ithm installs the do wnloaded ima ge on the system board Fl ash de vice (flash:).
20-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images • Downloading a n Ima ge File.
20-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images For more inform ation , refer to the docum entati on for your FTP server .
20-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images Note T o a void an uns uccessf .
20-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images If you spe cify the /lea ve-old-sw , the existi ng files are n ot re moved.
20-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images The archi ve upload-sw command b uilds an image f ile on the server b y uploading these f iles in order: info, the Cisco IOS imag e, the HTML f iles, and info.
20-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images RCP requires a c lient to send a rem ote usernam e on each RCP reque st to a server .
20-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images Downloading an Image File by Using RCP Y o u can d o wnload a ne w image f ile and replac e or k eep the cu rrent i mage.
20-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images Note T o a void an uns ucces sfu.
20-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images Note If the Flash device h as s.
20-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images The archive upl oad-sw pri vileged EXEC comman d buil ds an image f ile on the serv er b y uploadin g these fi les in order: info, th e Cisco IOS image, the HTML f iles, and info.
20-33 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 0 Managing Firm ware and Configurat ions Working with Software Images Step 7 Click the Upgrade button. For additional informatio n, click the Help icon on the Software Upgrade screen.
20-34 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working wi th Soft ware Images.
CH A P T E R 21-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 21 Configuring System Message Logg ing This chapter d escribes how to configure system me ssage log ging on yo ur acce ss point.
21-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Underst andin g System Me ssag e Loggi ng Understandin g System Messa ge Logging By default , access p oints se nd the output from syst em messa ges and deb ug privileged E XEC com mand s to a logging proc ess.
21-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configuring Syste m Message L ogging Config uring S ystem Message Loggi ng T able 21-1 describes the elements of syslog messages.
21-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Configur ing System Message L ogging Disabling an d Enab ling Me ssage Logg ing Message logging is enabled by default.
21-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configuring Syste m Message L ogging Config uring S ystem Message Loggi ng Setting th e Messag e Disp lay Destination Device If message logging is enabled, you can se nd messages to specif ic loc ations in a ddition to the co nsole.
21-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Configur ing System Message L ogging Enabling a nd Disab ling Times tamps on Lo g Mes sages By def ault, log messages ar e not tim estamped.
21-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configuring Syste m Message L ogging Config uring S ystem Message Loggi ng This example shows part of a log ging display wit h sequenc e numbers e nabled : 000019: %SYS-5-CONFIG_I: Configured from console by vty2 (10.
21-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Configur ing System Message L ogging T able 21-3 des cribe s the le vel keywords. It a lso list s the correspo nding U NIX s yslog de finitions from the most se vere le vel to the least se vere lev e l.
21-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configuring Syste m Message L ogging Config uring S ystem Message Loggi ng Beginn ing in pr i vilege.
21-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Configur ing System Message L ogging Configuring UNIX Syslog Servers The next sectio ns d escrib e how to configure the 4 .
21-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configuring Syste m Message L ogging Config uring S ystem Message Loggi ng T o remov e a syslog serv er , use the no logging ho st globa l configurat ion co mman d, and specif y the syslo g server IP address.
21-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 1 Configur ing Syste m Message Logg ing Display ing the Log ging Confi guration Displaying the Log gi.
CH A P T E R 22-1 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 22 Troubleshooting This chapter pro vides troubleshooting procedures for basic p roblems with the wireless de vice.
22-2 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Checking the Top Panel Indicators If your wireless device is not communicating, check th e three LED indicators on the top panel to quickly assess the device’ s status.
22-3 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Figur e 22-2 Indicators on the 1 1 00 Series A c.
22-4 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Figure 22-4 Indicators on the 350 Se r ies Acces.
22-5 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Note Regarding LED status colors, it is expected that there will be small v ariations in color intensity and hue from unit to unit.
22-6 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators The LED signals are listed in Ta b l e 2 2 - 2 .
22-7 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Note Regarding LED status colors, it is expected that there will be small v ariations in color intensity and hue from unit to unit.
22-8 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Indicators on 1040 or 1140 Series Access Point If your access point i s not working pro perly , check the Ether net and Status LEDs of the unit.
22-9 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators 48VD C MO D E CO NSOL E ET HE RNE T 207523 2 3 4.
22-10 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Note It is expected that there will be small va riations in LED color intensity and hue from unit to unit.
22-11 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Indicators on 1240 Series Access Points If your access point is not w orking properly , check the Status, Ethernet, and Radio LEDs on the 2.
22-12 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Note It is expected that there will be small va riations in LED color intensity and hue from unit to unit.
22-13 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Indicators on 1250 Access Points If your access point is not w orking properly , check the Ethernet, Status, and Radio LEDs on the 2.
22-14 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators T able 22-5 1250 Ser ies Access P oint LED Signals Message type Ethernet LED Status LED Radio LED Meaning Boot loader status Green Off Amber DRAM test in progress.
22-15 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Note It is expect ed that there will be small v ariations in LED color intensity and hue from unit to unit.
22-16 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Figur e 22-8 1260 Series A ccess P oint LED T able 22-6 shows th e 1260 access point LED indicators for v arious conditions.
22-17 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Indicators on 1300 Outdoor Access Point/Bridges If your access point/bridge is no t associating with a remote bridge or access point, check the four LEDs on the back panel.
22-18 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Figur e 22-9 LEDs 1300 Series AP Mode LED Indications During access poi nt/bridge op eration the LEDs provide status information as sho wn in T abl e 22-7 .
22-19 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Pan el Indicators Note It is expect ed that there will be small v ariations in LED color intensity and hue from unit to unit.
22-20 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking the Top Panel Indicators Power Injector When the po wer injector is po wered up, it applie s 48-VDC to the dual-coax cables to the access point/bridge.
22-21 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Checking Power • Cisco Aironet Power Injector LR2— standard (incl uded with th.
22-22 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Checking Basic Settings access point remains in lo w power mode with t he radios disabled to pre vent a possible o ver -current condition.
22-23 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Resetting to the Default Configuration Note The wireless de vice MA C address that appears on the Status page in the Aironet Client Utility (A CU) is the MA C address for the wireless de vice radio.
22-24 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Resetting to th e Default Configuration Using the Web Browser Interface Follo w t.
22-25 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image flashfs[0]: flashfs fsck took 0 seconds. ...done initializing Flash. Step 5 Use the dir flash: command to display the contents of Flash and f ind the config.
22-26 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Reloading the A ccess Point Image Using the MODE button Y ou can use t he MODE bu.
22-27 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image Browser HTTP Interface The HTTP interface enables you to bro wse to the wireless de vice image file on your PC and do wnload the image to the wireless de vice.
22-28 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Reloading the A ccess Point Image Using the CLI Follo w the steps belo w to reload the wirele ss de vice image using the CLI.
22-29 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image extracting c350-k9w7-mx.122-13.JA1/html/level1/appsui.js (558 bytes) extracting c350-k9w7-mx.122-13.
22-30 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Image Recovery on the 1520 Access Point Step 6 Click IOS . A list of a vailable Cisco IOS versions appears. Step 7 Choose the v ersion you wish to do wnload.
22-31 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Image Recovery on the 1520 Access Point T o perform image recovery on the 15 20 access point, follo w these steps: Step 1 W ith the access point powered of f, connect an RJ45 consol e cable to the console port ().
22-32 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Image Recovery on the 1520 Access Point Note If the ENABLE_BREAK=no envir onmental variab le is set, you will not be able to escape to the bootloader .
22-33 Cisco IOS Software Configuratio n Guide for Cisco Aironet Ac cess Points OL-21881-03 Chapter 22 Troubleshooting Image Recovery on the 1520 Access Point MAC_ADDR=00:1F:27:75:DB:00 MAC_ADDR_BLOCK_SIZE=01 00 NETMASK=255.
22-34 Cisco IOS Software Configuration Gu ide for Cisco Airo net Access Points OL-21881-03 Chapter 22 Troublesho oting Image Recovery on the 1520 Access Point.
A- 1 Cisco IOS Software Configuration Guide for Cisco Airone t Access Points OL-21881-03 APPENDIX A Protocol Filters The tables in th is appendix list some of the protocol s that you can f ilter o n the access poin t.
A- 2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix A P rotocol Filters T able 0-1 Ethertyp e Pr ot ocols Protocol Additional Identifier ISO Designator ARP — 0x0806 RARP — 0x8035 IP — 0x0800 Berkeley Trailer Negotiation — 0x1000 LAN T es t — 0x0708 X.
A-3 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix A Protocol Filter s T able 0-2 IP Prot ocols Protocol Additional Identifier ISO Designator dummy — 0.
A- 4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix A P rotocol Filters T able 0-3 IP P or t Pr otoc ols Protocol Additional Identifier ISO Designator TCP .
A-5 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix A Protocol Filter s TSAP iso-t sap 102 CSO Name Serv er cso-ns csnet-ns 105 Remot e T eln et rtelnet 1.
A- 6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix A P rotocol Filters SNMP Unix Multiple xer smux 1 99 Appl eT alk Routing at -rtmp 201 Appl eT alk name bin ding a t-nbp 202 Appl eT alk echo at-ech o 204 Appl eT alk Zone In format ion a t-zi s 206 NISO Z39.
B-1 Cisco IOS Software Configuration Guide for Cisco Airone t Access Points OL-21881-03 APPENDIX B Supported MIBs This appe ndix lists the Simple Network Manage ment Protoc ol (SNMP) Mana gement Inf ormati on Bases (MIBs) that the access point supports for this software release.
B-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x B Supported MI Bs Using FTP to Acces s the MIB Files • CISCO- MEM OR Y -POO L-M IB • CISCO-PR OCESS.
C-1 Cisco IOS Software Configuration Guide for Cisco Airone t Access Points OL-21881-03 APPENDIX C Error and Event Messages This appendi x lists the CLI error and e ven t messages.
C-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Conv ent ions Conven tions System error messages are displayed in the format shown in Ta b l e 3 - 1 .
C-3 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Software Auto Upgrade Messages Software Auto Upgrade Messages Error Message SW-AUTO-UPGRADE-2-FATAL_FAILURE: “Attempt to upgrade software failed, software on flash may be deleted.
C-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Softwa re Auto Up grade Me ssage s Error Message AUTO-INSTALL-4-IP_ADDRESS_DHCP : “The radio is operating in au tomatic install mode and has set ip address dh cp.
C-5 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Associa tion Mana gement Messages Association Mana gement Messages Error Message DOT11-3-BADSTATE: “% s %s ->%s.” Explanati on 802.
C-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Unzip Mess ages Error Message DOT11-4-DIVER_USED: Interface $s, Mcs rates 8.
C-7 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s System Log Messa ges System Log Messages Erro r Mes sag e %DOT11-4-LOADING_RADIO: Interface [chars], loading the radio firmware ([chars]) Explanati on The r adio h as been stoppe d to l oad new firmware.
C-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages 802.11 Subsystem Mes sages Error Message DOT11-6-FREQ_USED: “Interface %s, frequency %d select ed.
C-9 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT11-3-TX_PWR_OUT_OF_RANGE: “Interface % s Radio transmit po wer out of range.
C-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-6-DFS_SCAN_START: “DFS: Scanning frequency %d M Hz for %d seconds.” Explanati on The d e vice ha s begun its DFS scan ning proc ess.
C-11 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT114-NO_MBSSID_BACKUP_VLAN: “Backup VLANs cannot be configured if MBSSID is not enabled.
C-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-2-UPLINK_FAILED: “Uplink to parent failed: %s.” Explanati on The con necti on to the pa rent acce ss point failed fo r the displ ayed re ason.
C-13 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT11-4-MAXRETRIES: “Packet to client %e reached max retries, removing the client.
C-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-4-RADIO_NO_FREQ: “Interface &s, all frequencies have been blocked, interface not started.
C-15 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT11-4-FLASHING_RADIO: “Interface %s, flashing ra dio firmware (%s).” Explanati on The indicated inter face r adio has been stopped to load the indicated ne w f irmware.
C-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-4-UPLINK_LINK_DOWN: “Interface %s, parent lost: %s.
C-17 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT11-6-ANTENNA_GAIN: “Interface %s, antenna position /gain changed, adjusting transmitter power.
C-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-4-CCMP_REPLAY: “AE S-CCMP TSC rep lay was detected on packet (TSC 0x%11x received from &e).
C-19 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s 802.11 Subs ystem Messages Error Message DOT11-3-TKIP_MIC_FAILURE_REPEATED: “Two TKIP Michael MIC failures were detected within %s seconds on %s inter face.
C-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages 802.11 Subsyst em Me ssages Error Message DOT11-4-NO_VLAN_ID: “VLAN id %d from Radius server is not configured for station %e.
C-21 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Inter -Access Poi nt Prot ocol Messages Error Message SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: “IOS crypto FIPS self test passed.
C-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Local A uthentic ator Mess ages Local Authentic ator Messages Error Messag.
C-23 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Local Au thentica tor Messages Error Message DOT1X-SHIM-3-UNSUPPORTED_KM: “Unsupported key managem ent: %X.” Explanati on Am error o ccurred d uring the initializa tion of th e shim l ayer .
C-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages WDS Mess ages out be fore tryi ng th e next configured se rver . A Radiu s server marked a s dead is sk ipped by additi onal re quests fo r the du ratio n of the m inute s unless a ll ser vers are ma rked dead .
C-25 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Mini IO S Messages Error Message WLCCP-NM-3-WNM_LINK_DOWN: Link to WNM is down Explanati on The networ k manage r is not respondi ng to keep-act iv e messages.
C-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Access Point/Brid ge Mes sages Error Message Saving this config to nvram may corrupt any network m anagement or security files stored at the end of nv ram.
C-27 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s Exter nal Ra dius Serv er Error Messages External Radius Server Error Me .
C-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages Sens or Me ssag es Sensor Messages Error Message SENSOR-3-TEMP_CRITICAL: S.
C-29 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s SNMP Err or Messages Error Message SENSOR-3-VOLT_NORMAL: System sensor .
C-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages SSH Error Mes sages Erro r Mes sag e SNMP-4-NOENGINEIDV6: Remote snmpEngineID for U nrecognized format ‘ %P’ n ot found when creatin g user: “s” Explanati on An attempt to cre ate a u ser f ailed.
C-31 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 Append ix C Error and Event Message s SSH Error Messages Error Message SSH-5-SSH_CLOSE: SSH Session from “%s.
C-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendi x C Error and Event Mess ages SSH Error Mes sages.
GL-1 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 GLOSSAR Y 802.11 T he IEEE standa rd that specif ies carrier s ense med ia acce ss contr ol and ph ysic al layer sp ecification s for 1- a nd 2-megabit -per-second ( Mbps) wirele ss LAN s operati ng in the 2.
Glos sary GL-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 beacon A wireless LA N packe t that sign als the a vailability and prese nce of th e wireless de vic e.
Glossary GL-3 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 dipole A ty pe of lo w-gain (2. 2-dBi) an tenna consisti ng of tw o (of ten intern al) ele ments.
Glos sary GL-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 IP subnet m ask Th e num ber used to ident ify t he IP subnet work, i ndicating whe ther th e IP address ca n be recog nized on th e LAN or if it mu st be reache d throu gh a gate way .
Glossary GL-5 Cisco IOS Software Configuration Guide for Cisco Air onet Access Points OL-21881-03 roaming A fe ature of so me Acce ss Points that allo ws users to mo ve through a fac ility while m aintaining an unbroken c onnectio n to the LAN. RP-TNC A connec tor t ype uni que to Cis co Ai ronet radios and a ntenna s.
Glos sary GL-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 W WDS W ireless Domain Services (WDS). An access point pro viding WDS on your wire less LAN m aintains a cache o f cred ential s for C CKM-capab le client devi ces on your wirele ss LAN.
An important point after buying a device Cisco Systems AIRCAP2602IAK9 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems AIRCAP2602IAK9 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems AIRCAP2602IAK9 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems AIRCAP2602IAK9 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems AIRCAP2602IAK9 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems AIRCAP2602IAK9, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems AIRCAP2602IAK9.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems AIRCAP2602IAK9. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems AIRCAP2602IAK9 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
