Page 3 - C O N T E N T S; Overview; Using the Web-Browser Interface; Using the Command-Line Interface
1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 C O N T E N T S Audience i-xix Purpose i-xx Organization i-xx Conventions i-xxi Related Publications i-xxiv Obtaining Documentation, Obtaining Support, and Security Guidelines i-xxiv C H A P T E R 1 Overview 1-1 Fea...
Page 4 - Configuring the Access Point for the First Time
Contents 2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Getting Help 3-3 Abbreviating Commands 3-3 Using no and default Forms of Commands 3-4 Understanding CLI Messages 3-4 Using Command History 3-4 Changing the Command History Buffer Size 3-5 Recalling Commands...
Page 5 - Administering the Access Point
Contents 3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Using the Express Security Page 4-20 CLI Configuration Examples 4-21 Configuring System Power Settings for 1040, 1130, 1140, 1240, 1250, and 1260 Series Access Points 4-26 Using the AC Power Adapter 4-26 Us...
Page 7 - Configuring Radio Settings
Contents 5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Default Banner Configuration 5-35 Configuring a Message-of-the-Day Login Banner 5-35 Configuring a Login Banner 5-37 Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode 5-37 Migrating to Ja...
Page 8 - Configuring Multiple SSIDs
Contents 6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Configuring Transmit and Receive Antennas 6-26 Enabling and Disabling Gratuitous Probe Response 6-27 Disabling and Enabling Aironet Extensions 6-28 Configuring the Ethernet Encapsulation Transformation Meth...
Page 9 - Configuring Spanning Tree Protocol; Configuring an Access Point as a Local Authenticator
Contents 7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 CLI Configuration Example 7-10 Displaying Configured BSSIDs 7-10 Assigning IP Redirection for an SSID 7-11 Guidelines for Using IP Redirection 7-12 Configuring IP Redirection 7-12 Including an SSID in an SS...
Page 10 - Configuring Cipher Suites and WEP; Configuring Authentication Types
Contents 8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Configuring Other Access Points to Use the Local Authenticator 9-6 Configuring EAP-FAST Settings 9-7 Configuring PAC Settings 9-7 Configuring an Authority ID 9-8 Configuring Server Keys 9-8 Possible PAC Fai...
Page 12 - Configuring RADIUS and TACACS+ Servers
Contents 10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Configuring Access Points to Participate in WIDS 12-29 Configuring the Access Point for Scanner Mode 12-29 Configuring the Access Point for Monitor Mode 12-29 Displaying Monitor Mode Statistics 12-30 Confi...
Page 13 - Configuring VLANs; Configuring QoS; Configuring Filters
Contents 11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 C H A P T E R 14 Configuring VLANs 14-1 Understanding VLANs 14-2 Related Documents 14-3 Incorporating Wireless Devices into VLANs 14-4 Configuring VLANs 14-4 Configuring a VLAN 14-5 Assigning Names to VLAN...
Page 14 - Configuring CDP; Configuring SNMP
Contents 12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Configuring Filters Using the CLI 16-2 Configuring Filters Using the Web-Browser Interface 16-3 Configuring and Enabling MAC Address Filters 16-3 Creating a MAC Address Filter 16-4 Using MAC Address ACLs t...
Page 15 - Managing Firmware and Configurations
Contents 13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 SNMP Examples 18-10 Displaying SNMP Status 18-12 C H A P T E R 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode 19-1 Understanding Repeater Access Points 19-2 Configuring a Repea...
Page 17 - Configuring System Message Logging; Troubleshooting
Contents 15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Browser HTTP Interface 20-32 Browser TFTP Interface 20-33 C H A P T E R 21 Configuring System Message Logging 21-1 Understanding System Message Logging 21-2 Configuring System Message Logging 21-2 System L...
Page 18 - Protocol Filters; Supported MIBs; Error and Event Messages
Contents 16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Using the CLI 22-25 Reloading the Access Point Image 22-26 Using the MODE button 22-27 Using the Web Browser Interface 22-27 Browser HTTP Interface 22-28 Browser TFTP Interface 22-28 Using the CLI 22-29 Ob...
Page 19 - Preface; Audience
xix Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Preface Revised: August 30, 2012OL-21881-03 Audience This guide is for the networking professional who installs and manages Cisco Aironet Access Points. To use this guide, you should have experience working with t...
Page 20 - Purpose; Organization
xx Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Preface Purpose Purpose This guide provides the information you need to install and configure your access point. This guide provides procedures for using the Cisco IOS software commands that have been created or ch...
Page 21 - Conventions
xxi Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Preface Conventions Chapter 12, “Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services,” describes how to configure the access point to participate in WDS, to allow fast...
Page 24 - Related Publications
xxiv Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Preface Related Publications Related Publications These documents provide complete information about the access point: • Getting Started Guide: Cisco Aironet 1040 Series Access Points • Getting Started Guide: Cis...
Page 26 - Features; Features Introduced in This Release
1-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Overview Features • The 1300 series outdoor access point/bridge uses an integrated antenna and can be configured to use external, dual-diversity antennas. • The 2600 series access point contains dual-ban...
Page 28 - Management Options; Roaming Client Devices; Root Access Point
1-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Overview Management Options Management Options You can use the wireless device management system through the following interfaces: • The Cisco IOS command-line interface (CLI), which you use through a co...
Page 29 - Repeater Access Point
1-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Overview Network Configuration Examples Figure 1-1 Access Points as Root Units on a Wired LAN Repeater Access Point An access point can be configured as a stand-alone repeater to extend the range of your...
Page 30 - Bridges; Workgroup Bridge
1-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Overview Network Configuration Examples Bridges The 1140, 1200, 1240, and 1250 series access points and the 1300 access point/bridge can be configured as root or non-root bridges. In this role, an access...
Page 31 - Central Unit in an All-Wireless Network
1-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 1 Overview Network Configuration Examples you can connect the printers to a hub or to a switch, connect the hub or switch to the access point Ethernet port, and configure the access point as a workgroup br...
Page 34 - Using the Web-Browser Interface for the First Time; Using the Management Pages in the Web-Browser Interface
2-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Using the Web-Browser Interface for the First Time Using the Web-Browser Interface for the First Time Use the wireless device IP address to browse to the management system...
Page 35 - Using Action Buttons
2-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Using the Management Pages in the Web-Browser Interface Using Action Buttons Table 2-1 lists the page links and buttons that appear on most management pages. Table 2-1 Com...
Page 36 - Character Restrictions in Entry Fields; Enabling HTTPS for Secure Browsing
2-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Enabling HTTPS for Secure Browsing Character Restrictions in Entry Fields Because the 1200 series access point uses Cisco IOS software, there are certain characters that y...
Page 44 - CLI Configuration Example; Deleting an HTTPS Certificate
2-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Enabling HTTPS for Secure Browsing Figure 2-12 Import Successful Window Step 21 Click OK . Step 22 On the Certificate window shown in Figure 2-7 , which is still displaye...
Page 45 - Using Online Help; Changing the Location of Help Files
2-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Using Online Help Using Online Help Click the help icon at the top of any page in the web-browser interface to display online help. Figure 2-13 shows the help and print i...
Page 46 - Disabling the Web-Browser Interface
2-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 2 Using the Web-Browser Interface Disabling the Web-Browser Interface Table 2-2 shows an example help location and Help Root URL for an 1100 series access point. Step 5 Click Apply . Disabling the Web-Bro...
Page 48 - Cisco IOS Command Modes
3-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Cisco IOS Command Modes Cisco IOS Command Modes The Cisco IOS user interface is divided into many different modes. The commands available to you depend on which mode you ...
Page 49 - Getting Help
3-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Getting Help Getting Help You can enter a question mark (?) at the system prompt to display a list of commands available for each command mode. You can also obtain a list...
Page 50 - Using no and default Forms of Commands; Understanding CLI Messages
3-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Using no and default Forms of Commands Using no and default Forms of Commands Most configuration commands also have a no form. In general, use the no form to disable a fe...
Page 51 - Changing the Command History Buffer Size
3-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Using Command History Changing the Command History Buffer Size By default, the wireless device records ten command lines in its history buffer. Beginning in privileged EX...
Page 52 - Using Editing Features; Enabling and Disabling Editing Features
3-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Using Editing Features Using Editing Features This section describes the editing features that can help you manipulate the command line. It contains these sections: • Ena...
Page 53 - Editing Command Lines that Wrap
3-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Using Editing Features Editing Command Lines that Wrap You can use a wraparound feature for commands that extend beyond a single line on the screen. When the cursor reach...
Page 54 - Searching and Filtering Output of show and more Commands
3-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Searching and Filtering Output of show and more Commands In this example, the access-list global configuration command entry extends beyond one line. When the cursor firs...
Page 55 - Accessing the CLI; Opening the CLI with Telnet; Opening the CLI with Secure Shell
3-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 3 Using the Command-Line Interface Accessing the CLI Accessing the CLI You can open the wireless device CLI using Telnet or Secure Shell (SSH). Opening the CLI with Telnet Follow these steps to open the CL...
Page 57 - Before You Start
C H A P T E R 4-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 4 Configuring the Access Point for the First Time This chapter describes how to configure basic settings on the wireless device for the first time. The contents of this chapter are similar to the ins...
Page 58 - Resetting the Device to Default Settings; Resetting to Default Settings Using the MODE Button
4-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Before You Start • A system name for the wireless device • The case-sensitive wireless service set identifier (SSID) for your radio network • If not connec...
Page 59 - Resetting to Default Settings Using the CLI; Logging into the Access Point
4-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Logging into the Access Point Step 7 Click the Reset to Defaults button to reset all settings, including the IP address, to factory defaults. To reset all ...
Page 60 - Obtaining and Assigning an IP Address
4-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Obtaining and Assigning an IP Address • Telnet (if the AP is configured with an IP address) • console port Note Not all models of Cisco Aironet Access Poin...
Page 61 - Default IP Address Behavior; Connecting to the 1100 Series Access Point Locally
4-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Connecting to the 1100 Series Access Point Locally Default IP Address Behavior When you connect a 1040, 1130AG, 1140, 1200, 1240, 1250, 1260, 2600 access p...
Page 62 - Connecting to the 1130 Series Access Point Locally
4-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Connecting to the 1130 Series Access Point Locally Note When you connect your PC to the access point or reconnect your PC to the wired LAN, you might need ...
Page 63 - Connecting to the 1300 Series Access Point/Bridge Locally
4-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Connecting to the 1300 Series Access Point/Bridge Locally Step 3 When connected, press enter or type en to access the command prompt. Pressing enter takes ...
Page 64 - Default Radio Settings; Assigning Basic Settings
4-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Default Radio Settings Default Radio Settings Beginning with Cisco IOS Release 12.3(8)JA, access point radios are disabled and no default SSID is assigned....
Page 72 - Configuring Basic Security Settings
4-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring Basic Security Settings Configuring Basic Security Settings After you assign basic settings to the wireless device, you must configure securit...
Page 73 - Understanding Express Security Settings; Using VLANs
4-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring Basic Security Settings Understanding Express Security Settings The SSIDs that you create using the Express security page appear in the SSID t...
Page 74 - Express Security Types
4-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring Basic Security Settings Express Security Types Table 4-2 describes the four security types that you can assign to an SSID. Table 4-2 Security ...
Page 76 - Express Security Limitations; Using the Express Security Page
4-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring Basic Security Settings Express Security Limitations Because the Express Security page is designed for simple configuration of basic security,...
Page 77 - CLI Configuration Examples
4-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring Basic Security Settings CLI Configuration Examples The examples in this section show the CLI commands that are equivalent to creating SSIDs us...
Page 82 - Using the AC Power Adapter
4-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring System Power Settings for 1040, 1130, 1140, 1240, 1250, and 1260 Series Access Points bridge-group 1 no bridge-group 1 source-learning bridge-...
Page 83 - Using a Power Injector; dot11 extension power native Command
4-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring System Power Settings for 1040, 1130, 1140, 1240, 1250, and 1260 Series Access Points Using a Switch That Does Not Support IEEE 802.3af Power ...
Page 84 - Assigning an IP Address Using the CLI
4-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Assigning an IP Address Using the CLI Table 4-3 Inline Power Options based on Access Point Radio Configuration 1. Maximum transmit power will vary by chan...
Page 85 - Using a Telnet Session to Access the CLI; Configuring the 802.1X Supplicant; Creating a Credentials Profile
4-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Using a Telnet Session to Access the CLI Using a Telnet Session to Access the CLI Follow these steps to access the CLI by using a Telnet session. These st...
Page 86 - Applying the Credentials to an Interface or SSID; Applying the Credentials Profile to the Wired Port
4-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring the 802.1X Supplicant Use the no form of the dot1x credentials command to negate a parameter. The following example creates a credentials prof...
Page 87 - Applying the Credentials Profile to an SSID Used For the Uplink
4-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring the 802.1X Supplicant The following example applies the credentials profile test to the access point Fast Ethernet port: ap1240AG> enable P...
Page 88 - Creating and Applying EAP Method Profiles
4-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 4 Configuring the Access Point for the First Time Configuring the 802.1X Supplicant repeater-ap# config terminal Enter configuration commands, one per line. End with CTRL-Z. repeater-ap(config-if)# dot11 ...
Page 90 - Disabling the Mode Button
5-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Disabling the Mode Button Disabling the Mode Button You can disable the mode button on access points having a console port by using the [no] boot mode-button command. This ...
Page 91 - Preventing Unauthorized Access to Your Access Point; Protecting Access to Privileged EXEC Commands
5-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Preventing Unauthorized Access to Your Access Point Preventing Unauthorized Access to Your Access Point You can prevent unauthorized users from reconfiguring the wireless d...
Page 92 - Default Password and Privilege Level Configuration
5-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Protecting Access to Privileged EXEC Commands Default Password and Privilege Level Configuration Table 5-1 shows the default password and privilege level configuration. Set...
Page 94 - Protecting Enable and Enable Secret Passwords with Encryption
5-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Protecting Access to Privileged EXEC Commands Protecting Enable and Enable Secret Passwords with Encryption To provide an additional layer of security, particularly for pas...
Page 95 - Configuring Username and Password Pairs
5-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Protecting Access to Privileged EXEC Commands If both the enable and enable secret passwords are defined, users must enter the enable secret password. Use the level keyword...
Page 96 - Configuring Multiple Privilege Levels; Setting the Privilege Level for a Command
5-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Protecting Access to Privileged EXEC Commands To disable username authentication for a specific user, use the no username name global configuration command. To disable pass...
Page 97 - Logging Into and Exiting a Privilege Level; Controlling Access Point Access with RADIUS
5-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Controlling Access Point Access with RADIUS When you set a command to a privilege level, all commands whose syntax is a subset of that command are also set to that level. F...
Page 98 - Default RADIUS Configuration; Configuring RADIUS Login Authentication
5-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Controlling Access Point Access with RADIUS RADIUS provides detailed accounting information and flexible administrative control over authentication and authorization proce...
Page 100 - Defining AAA Server Groups
5-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Controlling Access Point Access with RADIUS Defining AAA Server Groups You can configure the wireless device to use AAA server groups to group existing server hosts for au...
Page 103 - Displaying the RADIUS Configuration; Controlling Access Point Access with TACACS+; Default TACACS+ Configuration
5-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Controlling Access Point Access with TACACS+ To disable authorization, use the no aaa authorization { network | exec } method1 global configuration command. Displaying the...
Page 105 - Displaying the TACACS+ Configuration
5-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Controlling Access Point Access with TACACS+ To disable AAA, use the no aaa new-model global configuration command. To disable AAA authentication, use the no aaa authentic...
Page 106 - Configuring Ethernet Speed and Duplex Settings
5-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring Ethernet Speed and Duplex Settings Configuring Ethernet Speed and Duplex Settings You can assign the wireless device Ethernet port speed and duplex settings. W...
Page 108 - Configuring the Authentication Cache and Profile
5-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring the Authentication Cache and Profile To disable AAA, use the no aaa new-model global configuration command. To disable authorization, use the no aaa authorizat...
Page 110 - Configuring the Access Point to Provide DHCP Service; Setting up the DHCP Server
5-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring the Access Point to Provide DHCP Service ! ip http server ip http authentication aaa no ip http secure-server ip http help-path http://www.cisco.com/warp/publi...
Page 112 - Monitoring and Maintaining the DHCP Server Access Point; Show Commands
5-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring the Access Point to Provide DHCP Service Use the no form of these commands to return to default settings. This example shows how to configure the wireless devi...
Page 113 - Clear Commands; Debug Command; Configuring the Access Point for Secure Shell; Understanding SSH
5-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring the Access Point for Secure Shell Clear Commands In privileged Exec mode, use the commands in Table 5-3 to clear DHCP server variables. Debug Command To enable...
Page 114 - Configuring SSH; Configuring Client ARP Caching; Understanding Client ARP Caching; Optional ARP Caching
5-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring Client ARP Caching Note The SSH feature in this software release does not support IP Security (IPsec). Configuring SSH Before configuring SSH, download the cry...
Page 115 - Configuring ARP Caching; Managing the System Time and Date; Understanding Simple Network Time Protocol
5-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Managing the System Time and Date Configuring ARP Caching Beginning in privileged EXEC mode, follow these steps to configure the wireless device to maintain an ARP cache f...
Page 116 - Configuring SNTP; Setting the System Clock
5-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Managing the System Time and Date http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800ca66f.html#1001131 If multiple serv...
Page 117 - Displaying the Time and Date Configuration; Configuring the Time Zone
5-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Managing the System Time and Date Beginning in privileged EXEC mode, follow these steps to set the system clock: This example shows how to manually set the system clock to...
Page 118 - Configuring Summer Time (Daylight Saving Time)
5-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Managing the System Time and Date The minutes-offset variable in the clock timezone global configuration command is available for those cases where a local time zone is a ...
Page 120 - Defining HTTP Access; Configuring a System Name and Prompt; Default System Name and Prompt Configuration
5-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Defining HTTP Access Defining HTTP Access By default, 80 is used for HTTP access, and port 443 is used for HTTPS access. These values can be customized by the user. Follow...
Page 121 - Understanding DNS; Default DNS Configuration
5-33 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring a System Name and Prompt When you set the system name, it is also used as the system prompt. To return to the default host name, use the no hostname global con...
Page 122 - Setting Up DNS
5-34 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring a System Name and Prompt Setting Up DNS Beginning in privileged EXEC mode, follow these steps to set up the wireless device to use the DNS: If you use the wire...
Page 123 - Displaying the DNS Configuration; Creating a Banner; Default Banner Configuration
5-35 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Creating a Banner To remove a domain name, use the no ip domain-name name global configuration command. To remove a name server address, use the no ip name-server server-a...
Page 125 - Configuring a Login Banner; Migrating to Japan W52 Domain
5-37 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode Configuring a Login Banner You can configure a login banner to appear on all connected terminals. This...
Page 127 - Verifying the Migration
5-39 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging Verifying the Migration Use the show controllers command to confirm the migration as shown in ...
Page 128 - CLI Command
5-40 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 5 Administering the Access Point Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging In a typical scenario, multiple VLAN support permits users to set up point-to-multipoint bridg...
Page 130 - Enabling the Radio Interface; Configuring the Role in Radio Network
6-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling the Radio Interface Enabling the Radio Interface The wireless device radios are disabled by default. Note Beginning with Cisco IOS Release 12.3(8)JA there is no SSID. ...
Page 133 - Universal Workgroup Bridge Mode
6-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Role in Radio Network Note When you enable the role in the radio network as a Bridge/workgroup bridge and enable the interface using the no shut command, the ph...
Page 134 - Configuring Dual-Radio Fallback
6-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Role in Radio Network • Outdoor MIMO bridging using external antennas has not been fully tested and is not fully supported with this release. Note In point-to-m...
Page 135 - Radio Tracking; Fast Ethernet Tracking
6-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Role in Radio Network Radio Tracking You can configure the access point to track or monitor the status of one of its radios. It the tracked radio goes down or i...
Page 136 - Bridge Features Not Supported; Configuring Radio Data Rates
6-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Data Rates Bridge Features Not Supported The following features are not supported when a 1200 or 1240 series access point is configured as a bridge: • Clear C...
Page 139 - Configuring MCS Rates
6-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring MCS Rates Use the no form of the speed command to remove one or more data rates from the configuration. This example shows how to remove data rates basic-2.0 and b...
Page 140 - Configuring Radio Transmit Power
6-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Transmit Power MCS rates are configured using the speed command. The following example shows a speed setting for an 802.11n 5-GHz radio: interface Dot11Radio...
Page 143 - Limiting the Power Level for Associated Client Devices
6-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Transmit Power Limiting the Power Level for Associated Client Devices You can also limit the power level on client devices that associate to the wireless dev...
Page 144 - Configuring Radio Channel Settings
6-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings Use the no form of the client power command to disable the maximum power level for associated clients. Note Aironet extensions must be enabl...
Page 146 - Dynamic Frequency Selection
6-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings Dynamic Frequency Selection Access points with 5-GHz radios configured at the factory for use in the United States, Europe, Singapore, Korea...
Page 147 - Radar Detection on a DFS Channel; CLI Commands
6-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings If radar is detected on a manually configured DFS channel, the channel will be changed automatically and will not return to the configured c...
Page 148 - Confirming that DFS is Enabled; Configuring a Channel
6-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings Confirming that DFS is Enabled Use the show controllers dot11radio1 command to confirm that DFS is enabled. The command also includes indica...
Page 149 - Blocking Channels from DFS Selection
6-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Radio Channel Settings The following example configures the 5 GHz radio to use DFS: ap#configure terminal ap(config)#interface dot11radio1 ap(config-if)#channel df...
Page 150 - Setting the 802.11n Guard Interval; Configuring Location-Based Services; Understanding Location-Based Services
6-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Location-Based Services This example shows how to unblock all frequencies for DFS: ap(config-if)# no dfs band block Setting the 802.11n Guard Interval The 802.11n ...
Page 151 - Configuring LBS on Access Points
6-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Location-Based Services Figure 6-2 Basic LBS Network Configuration The access points that you configure for LBS should be in the same vicinity. If only one or two ...
Page 152 - Enabling and Disabling World Mode
6-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling World Mode In this example, the profile southside is enabled on the access point 802.11g radio: ap# configure terminal ap(config)# dot11 lbs southside a...
Page 153 - Disabling and Enabling Short Radio Preambles
6-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Disabling and Enabling Short Radio Preambles Use the no form of the command to disable world mode. Disabling and Enabling Short Radio Preambles The radio preamble (sometimes c...
Page 154 - Configuring Transmit and Receive Antennas
6-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring Transmit and Receive Antennas Short preambles are enabled by default. Use the preamble-short command to enable short preambles if they are disabled. Configuring Tr...
Page 155 - Enabling and Disabling Gratuitous Probe Response
6-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling Gratuitous Probe Response Enabling and Disabling Gratuitous Probe Response Gratuitous Probe Response (GPR) aids in conserving battery power in dual mode...
Page 156 - Disabling and Enabling Aironet Extensions
6-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Disabling and Enabling Aironet Extensions (config-if)# probe-response gratuitous speed 12.0 (config-if)# probe-response gratuitous period 30 speed 12.0 Use the no form of the ...
Page 157 - Configuring the Ethernet Encapsulation Transformation Method
6-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Ethernet Encapsulation Transformation Method Configuring the Ethernet Encapsulation Transformation Method When the wireless device receives data packets that a...
Page 158 - Enabling and Disabling Public Secure Packet Forwarding
6-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling Public Secure Packet Forwarding Note This feature is best suited for use with stationary workgroup bridges. Mobile workgroup bridges might encounter spo...
Page 159 - Configuring Protected Ports
6-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling and Disabling Public Secure Packet Forwarding PSPF is disabled by default. Beginning in privileged EXEC mode, follow these steps to enable PSPF: Use the no form of th...
Page 160 - Configuring the Beacon Period and the DTIM
6-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Beacon Period and the DTIM Configuring the Beacon Period and the DTIM The beacon period is the amount of time between access point beacons in Kilomicroseconds....
Page 161 - Configuring the Maximum Data Retries
6-33 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring the Maximum Data Retries Use the no form of the command to reset the RTS settings to defaults. Configuring the Maximum Data Retries The maximum data retries settin...
Page 162 - Enabling Short Slot Time for 802.11g Radios; Configuring VoIP Packet Handling
6-34 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Enabling Short Slot Time for 802.11g Radios Use the no form of the command to reset the setting to defaults. Enabling Short Slot Time for 802.11g Radios You can increase throu...
Page 163 - Viewing VoWLAN Metrics
6-35 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics The Stream page appears. Step 4 Click the tab for the radio to configure. Step 5 For both CoS 5 (Video) and CoS 6 (Voice) user priorities, choose Low La...
Page 164 - Viewing Voice Reports
6-36 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Viewing Voice Reports You can use a browser to access voice reports listing VoWLAN metrics stored on a WLSE. You can view reports for access point group...
Page 166 - Viewing Wireless Client Reports
6-38 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figure 6-6 Voice Streaming Progress Viewing Wireless Client Reports In addition to viewing voice reports from an access point perspective, you can view ...
Page 167 - Viewing Voice Fault Summary
6-39 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figure 6-7 Wireless Client Metrics Viewing Voice Fault Summary The Faults > Voice Summary page in WLSE displays a summary of the faults detected with...
Page 168 - Configuring Voice QoS Settings
6-40 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figure 6-8 Voice Fault Summary Configuring Voice QoS Settings You can use WLSE Faults > Voice QoS Settings screen to define the voice QoS thresholds ...
Page 169 - Configuring Voice Fault Settings
6-41 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Viewing VoWLAN Metrics Figure 6-9 Voice QoS Settings Configuring Voice Fault Settings You can use WLSE Faults > Manage Fault Settings screen to enable fault generation and ...
Page 170 - Configuring ClientLink; Using the CLI to Configure ClientLink; Debugging Radio Functions
6-42 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 6 Configuring Radio Settings Configuring ClientLink Configuring ClientLink Cisco ClientLink (referred to as Beam Forming) is an intelligent beamforming technology that directs the RF signal to 802.11a/g d...
Page 174 - Understanding Multiple SSIDs; Effect of Software Versions on SSIDs
7-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Understanding Multiple SSIDs Understanding Multiple SSIDs The SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. ...
Page 176 - Default SSID Configuration
7-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Configuring Multiple SSIDs Configuring Multiple SSIDs These sections contain configuration information for multiple SSIDs: • Default SSID Configuration, page 7-4 • Creating an ...
Page 178 - Viewing SSIDs Configured Globally
7-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Configuring Multiple SSIDs Note You use the ssid command authentication options to configure an authentication type for each SSID. See Chapter 9, “Configuring an Access Point a...
Page 179 - Using a RADIUS Server to Restrict SSIDs
7-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Configuring Multiple SSIDs ssid buffalo vlan 7 authentication open However, this sample output from a show dot11 associations privileged EXEC command shows the spaces in the SS...
Page 180 - Configuring Multiple Basic SSIDs; Requirements for Configuring Multiple BSSIDs; Guidelines for Using Multiple BSSIDs; Configuring Multiple BSSIDs
7-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Configuring Multiple Basic SSIDs Configuring Multiple Basic SSIDs Access point 802.11a, 802.11g, and 802.11n radios support up to 8 basic SSIDs (BSSIDs), which are similar to M...
Page 182 - Displaying Configured BSSIDs
7-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Configuring Multiple Basic SSIDs Step 7 (Optional) In the Multiple BSSID Beacon Settings section, select the Set SSID as Guest Mode check box to include the SSID in beacons. S...
Page 183 - Assigning IP Redirection for an SSID
7-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Assigning IP Redirection for an SSID Assigning IP Redirection for an SSID When you configure IP redirection for an SSID, the access point redirects all packets sent from clien...
Page 184 - Guidelines for Using IP Redirection
7-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Assigning IP Redirection for an SSID Guidelines for Using IP Redirection Keep these guidelines in mind when using IP redirection: • The access point does not redirect broadcas...
Page 185 - Including an SSID in an SSIDL IE; NAC Support for MBSSID
7-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs Including an SSID in an SSIDL IE This example shows how to configure IP redirection only for packets sent to the specific TCP and UDP ports specified in an ACL applied to the ...
Page 188 - Configuring NAC for MBSSID
7-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 7 Configuring Multiple SSIDs NAC Support for MBSSID Configuring NAC for MBSSID Note This feature supports only Layer 2 mobility within VLANs. Layer 3 mobility using network ID is not supported in this fea...
Page 192 - Understanding Spanning Tree Protocol; STP Overview
8-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Understanding Spanning Tree Protocol Understanding Spanning Tree Protocol This section describes how spanning-tree features work. It includes this information: • STP Ov...
Page 193 - Access Point/Bridge Protocol Data Units
8-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Understanding Spanning Tree Protocol The access point maintains a separate spanning-tree instance for each active VLAN configured on it. A bridge ID, consisting of the ...
Page 194 - Election of the Spanning-Tree Root
8-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Understanding Spanning Tree Protocol When a access point receives a configuration BPDU that contains superior information (lower access point ID, lower path cost, and s...
Page 195 - Creating the Spanning-Tree Topology; Spanning-Tree Interface States
8-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Understanding Spanning Tree Protocol Spanning-Tree Timers Table 8-1 describes the timers that affect the entire spanning-tree performance. Creating the Spanning-Tree To...
Page 197 - Blocking State; Listening State
8-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Understanding Spanning Tree Protocol 2. While spanning tree waits the forward-delay timer to expire, it moves the interface to the learning state and resets the forward...
Page 198 - Forwarding State; Configuring STP Features; Default STP Configuration
8-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Configuring STP Features Forwarding State An interface in the forwarding state forwards frames. The interface enters the forwarding state from the learning state. An in...
Page 199 - Configuring STP Settings
8-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Configuring STP Features The radio and Ethernet interfaces and the native VLAN on the access point are assigned to bridge group 1 by default. When you enable STP and as...
Page 200 - STP Configuration Examples; Root Bridge Without VLANs
8-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Configuring STP Features STP Configuration Examples These configuration examples show how to enable STP on root and non-root access points with and without VLANs: • Ro...
Page 201 - Non-Root Bridge Without VLANs
8-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Configuring STP Features Non-Root Bridge Without VLANs This example shows the configuration of a non-root bridge with no VLANs configured with STP enabled: hostname cl...
Page 203 - Non-Root Bridge with VLANs
8-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Configuring STP Features bridge 2 priority 10000 bridge 3 protocol ieee bridge 3 priority 3100 ! line con 0 exec-timeout 0 0 line vty 5 15 ! end Non-Root Bridge with V...
Page 204 - Displaying Spanning-Tree Status
8-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 8 Configuring Spanning Tree Protocol Displaying Spanning-Tree Status encapsulation dot1Q 1 native no ip route-cache bridge-group 1 ! interface FastEthernet0.2 encapsulation dot1Q 2 no ip route-cache bridg...
Page 206 - Understanding Local Authentication; Configuring a Local Authenticator
9-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Understanding Local Authentication Understanding Local Authentication Many small wireless LANs that could be made more secure with 802.1x authenticati...
Page 207 - Guidelines for Local Authenticators; Configuration Overview; Configuring the Local Authenticator Access Point
9-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator Guidelines for Local Authenticators Follow these guidelines when configuring an access point as a local authenticato...
Page 210 - Configuring Other Access Points to Use the Local Authenticator
9-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator AP(config-radsrv)# user 00095125d02b password 00095125d02b group cashiers AP(config-radsrv)# user 00079431f04a passw...
Page 211 - Configuring EAP-FAST Settings; Configuring PAC Settings; PAC Expiration Times; Generating PACs Manually
9-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator Each time the access point tries to use the main servers while they are down, the client device trying to authentica...
Page 212 - Configuring an Authority ID; Configuring Server Keys; Possible PAC Failures Caused by Access Point Clock
9-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator In this example, the local authenticator generates a PAC for the username joe , password-protects the file with the ...
Page 213 - Limiting the Local Authenticator to One Authentication Type; Unblocking Locked Usernames; Viewing Local Authenticator Statistics
9-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator Limiting the Local Authenticator to One Authentication Type By default, a local authenticator access point performs ...
Page 214 - Using Debug Messages
9-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 9 Configuring an Access Point as a Local Authenticator Configuring a Local Authenticator The second section lists stats for each access point (NAS) authorized to use the local authenticator. The EAP-FAST ...
Page 216 - Understanding Cipher Suites and WEP
10-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configuring Cipher Suites and WEP Understanding Cipher Suites and WEP Understanding Cipher Suites and WEP This section describes how WEP and cipher suites protect traffic on your wireless LAN. Just as ...
Page 217 - Creating WEP Keys
10-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configuring Cipher Suites and WEP Configuring Cipher Suites and WEP • TKIP (Temporal Key Integrity Protocol)—TKIP is a suite of algorithms surrounding WEP that is designed to achieve the best possible ...
Page 220 - Enabling Cipher Suites and WEP
10-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configuring Cipher Suites and WEP Configuring Cipher Suites and WEP Note If you enable MIC but you use static WEP (you do not enable any type of EAP authentication), both the access point and any devic...
Page 221 - Matching Cipher Suites with WPA or CCKM
10-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configuring Cipher Suites and WEP Configuring Cipher Suites and WEP Use the no form of the encryption command to disable a cipher suite. Matching Cipher Suites with WPA or CCKM If you configure your ac...
Page 222 - Enabling and Disabling Broadcast Key Rotation
10-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 10 Configuring Cipher Suites and WEP Configuring Cipher Suites and WEP Note If using WPA and CCKM as key management, only tkip and aes ciphers are supported. If using only CCKM as key management, ckip, cm...
Page 226 - Understanding Authentication Types; Open Authentication to the Access Point
11-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types Understanding Authentication Types This section describes the authentication types that you can configure on the access point. The au...
Page 227 - Shared Key Authentication to the Access Point
11-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types Figure 11-1 Sequence for Open Authentication Shared Key Authentication to the Access Point Cisco provides shared key authentication t...
Page 228 - EAP Authentication to the Network
11-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types EAP Authentication to the Network This authentication type provides the highest level of security for your wireless network. By using...
Page 229 - MAC Address Authentication to the Network
11-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types There is more than one type of EAP authentication, but the access point behaves the same way for each type: it relays authentication ...
Page 230 - Using CCKM for Authenticated Clients
11-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types Figure 11-4 Sequence for MAC-Based Authentication Combining MAC-Based, EAP, and Open Authentication You can set up the access point t...
Page 231 - Using WPA Key Management
11-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Understanding Authentication Types Figure 11-5 shows the reassociation process using CCKM. Figure 11-5 Client Reassociation Using CCKM Using WPA Key Management Wi-Fi Pr...
Page 234 - Assigning Authentication Types to an SSID
11-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types Note When you configure TKIP -only cipher encryption (not TKIP + WEP 128 or TKIP + WEP 40 ) on any radio interface or VLAN, every SSID...
Page 237 - Configuring WPA Migration Mode
11-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types Use the no form of the SSID commands to disable the SSID or to disable SSID features. This example sets the authentication type for th...
Page 238 - Configuring Additional WPA Settings; Setting a Pre-Shared Key; Configuring Group Key Updates
11-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types Configuring Additional WPA Settings Use two optional settings to configure a pre-shared key on the access point and adjust the frequen...
Page 239 - Configuring MAC Authentication Caching
11-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types This example shows how to configure a pre-shared key for clients using WPA and static WEP, with group key update options: ap# configur...
Page 240 - Configuring Authentication Holdoffs, Timeouts, and Intervals
11-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types This example shows how to enable MAC authentication caching with a one-hour timeout: ap# configure terminal ap(config)# dot11 aaa mac-...
Page 242 - Creating an EAP Method Profile
11-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Configuring Authentication Types Creating an EAP Method Profile Beginning in privileged exec mode, follow these steps to define a new EAP profile: Use the no command t...
Page 243 - Applying an EAP Profile to an Uplink SSID; Matching Access Point and Client Device Authentication Types
11-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 11 Configuring Authentication Types Matching Access Point and Client Device Authentication Types Applying an EAP Profile to an Uplink SSID This operation typically applies to repeater access points. Begi...
Page 248 - Understanding WDS; Role of the WDS Device
12-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Understanding WDS Understanding WDS When you configure Wireless Domain Services on your network, access points o...
Page 249 - Role of Access Points Using the WDS Device; Understanding Fast Secure Roaming
12-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Understanding Fast Secure Roaming Role of Access Points Using the WDS Device The access points on your ...
Page 251 - Understanding Radio Management; Understanding Layer 3 Mobility
12-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Understanding Radio Management device. The WDS device forwards the client’s credentials to the new acce...
Page 252 - Understanding Wireless Intrusion Detection Services
12-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Understanding Wireless Intrusion Detection Services Figure 12-3 Required Components for Layer 3 Mobility Click t...
Page 253 - Configuring WDS
12-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring WDS access points. The WLSE examines the BRIDGE MIB of each CDP-discovered switch to determ...
Page 254 - Guidelines for WDS; Requirements for WDS
12-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring WDS • Configuring the Authentication Server to Support WDS, page 12-15 • Configuring WDS Only Mode, ...
Page 255 - Configuring Access Points as Potential WDS Devices
12-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring WDS Figure 12-4 shows the required configuration for each device that participates in WDS. ...
Page 260 - Configuring Access Points to use the WDS Device
12-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring WDS Configuring Access Points to use the WDS Device Follow these steps to configure an access point...
Page 261 - Configuring the Authentication Server to Support WDS
12-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring WDS The access points that you configure to interact with the WDS automatically perform th...
Page 265 - Configuring WDS Only Mode
12-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring WDS Step 13 Select CiscoSecure Database from the Password Authentication drop-down menu. S...
Page 266 - Viewing WDS Information
12-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring WDS Viewing WDS Information On the web-browser interface, browse to the Wireless Services Summary p...
Page 267 - Configuring Fast Secure Roaming
12-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring Fast Secure Roaming Using Debug Messages In privileged exec mode, use these debug commands...
Page 268 - Configuring Access Points to Support Fast Secure Roaming
12-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring Fast Secure Roaming Configuring Access Points to Support Fast Secure Roaming To support fast, secur...
Page 270 - Configuring Management Frame Protection; Management Frame Protection
12-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring Management Frame Protection d. Select Mandatory or Optional under Authenticated Key Management. If ...
Page 272 - Configuring Client MFP
12-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Management Frame Protection Client MFP can be configured as either required or optional for a particular SSID. ...
Page 273 - Configuring Radio Management
12-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring Radio Management Beginning in privileged EXEC mode, follow these steps to configure the WD...
Page 275 - Configuring Access Points to Participate in WIDS; Configuring the Access Point for Scanner Mode
12-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring Access Points to Participate in WIDS Configuring Access Points to Participate in WIDS To p...
Page 276 - Displaying Monitor Mode Statistics
12-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring Access Points to Participate in WIDS Beginning in privileged EXEC mode, follow these steps to confi...
Page 277 - Configuring Monitor Mode Limits; Configuring an Authentication Failure Limit; Configuring WLSM Failover; Resilient Tunnel Recovery
12-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Configuring WLSM Failover Configuring Monitor Mode Limits You can configure threshold values that the ...
Page 278 - Active/Standby WLSM Failover
12-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Configuring WLSM Failover the active tunnels, which keeps data traffic going between client and SUP. But becaus...
Page 279 - Configuring and Enabling RADIUS
C H A P T E R 13-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 13 Configuring RADIUS and TACACS+ Servers This chapter describes how to enable and configure the Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access Control Sys...
Page 280 - Understanding RADIUS; RADIUS Operation
13-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Understanding RADIUS RADIUS is a distributed client/server system that secures networks against unauthorized access. RADIUS client...
Page 281 - Configuring RADIUS
13-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Figure 13-1 Sequence for EAP Authentication In Steps 1 through 9 in Figure 13-1 , a wireless client device and a RADIUS server on ...
Page 290 - Configuring Packet of Disconnect
13-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Beginning in privileged EXEC mode, follow these steps to specify RADIUS authorization for privileged EXEC access and network serv...
Page 291 - Starting RADIUS Accounting m
13-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Note When WDS is configured, PoD requests should be directed to the WDS. The WDS forwards the disassociation request to the paren...
Page 292 - Selecting the CSID Format
13-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS To disable accounting, use the no aaa accounting { network | exec } { start-stop } method1... global configuration command. Selec...
Page 293 - Configuring Settings for All RADIUS Servers
13-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Configuring Settings for All RADIUS Servers Beginning in privileged EXEC mode, follow these steps to configure global communicati...
Page 296 - Configuring WISPr RADIUS Attributes
13-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS To delete the vendor-proprietary RADIUS host, use the no radius-server host { hostname | ip-address } non-standard global configu...
Page 298 - RADIUS Attributes Sent by the Access Point
13-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS RADIUS Attributes Sent by the Access Point Table 13-2 through Table 13-6 identify the attributes sent by an access point to a cli...
Page 301 - Configuring and Enabling TACACS+; Understanding TACACS+
13-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling TACACS+ Configuring and Enabling TACACS+ This section contains this configuration information: • Understanding TACACS+, page 13-23 • TAC...
Page 304 - Configuring TACACS+ Login Authentication
13-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling TACACS+ To remove the specified TACACS+ server name or address, use the no tacacs-server host hostname global configuration command. To ...
Page 306 - Starting TACACS+ Accounting
13-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 13 Configuring RADIUS and TACACS+ Servers Configuring and Enabling TACACS+ The aaa authorization exec tacacs+ local command sets these authorization parameters: • Use TACACS+ for privileged EXEC access a...
Page 310 - Understanding VLANs
14-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Understanding VLANs Understanding VLANs A VLAN is a switched network that is logically segmented, by functions, project teams, or applications rather than on a physical or geographica...
Page 311 - Related Documents
14-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Understanding VLANs Figure 14-1 LAN and VLAN Segmentation with Wireless Devices Related Documents These documents provide more detailed information pertaining to VLAN design and confi...
Page 312 - Incorporating Wireless Devices into VLANs
14-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Configuring VLANs Incorporating Wireless Devices into VLANs The basic wireless components of a VLAN consist of an access point and a client associated to it using wireless technology....
Page 313 - Configuring a VLAN
14-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Configuring VLANs Configuring a VLAN Note When you configure VLANs on access points, the native VLAN must be VLAN1. In a single architecture, client traffic received by the access poi...
Page 315 - Assigning Names to VLANs; Guidelines for Using VLAN Names
14-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Configuring VLANs This example shows how to: • Name an SSID • Assign the SSID to a VLAN • Enable the VLAN on the radio and Ethernet ports as the native VLAN ap1200# configure terminal...
Page 316 - Creating a VLAN Name; Using a RADIUS Server to Assign Users to VLANs
14-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Configuring VLANs Creating a VLAN Name Beginning in privileged EXEC mode, follow these steps to assign a name to a VLAN: Use the no form of the command to remove the name from the VLA...
Page 317 - Using a RADIUS Server for Dynamic Mobility Group Assignment; Viewing VLANs Configured on the Access Point
14-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs Configuring VLANs Using a RADIUS Server for Dynamic Mobility Group Assignment You can configure a RADIUS server to dynamically assign mobility groups to users or user groups. This eli...
Page 318 - VLAN Configuration Example
14-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 14 Configuring VLANs VLAN Configuration Example Virtual-Dot11Radio0 Protocols Configured: Address: Received: Transmitted: Bridging Bridge Group 1 201688 0 Bridging Bridge Group 1 201688 0 Bridging Bridge...
Page 322 - Understanding QoS for Wireless LANs; QoS for Wireless LANs Versus QoS on Wired LANs; Impact of QoS on a Wireless LAN
15-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Understanding QoS for Wireless LANs Understanding QoS for Wireless LANs Typically, networks operate on a best-effort delivery basis, which means that all traffic has equal priority and ...
Page 323 - Precedence of QoS Settings
15-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Understanding QoS for Wireless LANs QoS on the wireless LAN focuses on downstream prioritization from the access point. Figure 15-1 shows the upstream and downstream traffic flow. Figur...
Page 324 - Using Wi-Fi Multimedia Mode
15-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Understanding QoS for Wireless LANs Note This release continues to support existing 7920 wireless phone firmware. Do not attempt to use the new standard (IEEE 802.11e draft 13) QBSS Loa...
Page 325 - Configuration Guidelines; Configuring QoS Using the Web-Browser Interface
15-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Configuring QoS Configuring QoS QoS is disabled by default (however, the radio interface always honors tagged 802.1P packets even when you have not configured a QoS policy). This sectio...
Page 329 - The QoS Policies Advanced Page; QoS Element for Wireless Phones
15-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Configuring QoS Step 19 Click the Apply button at the bottom of the page to apply the policies to the access point ports. The QoS Policies Advanced Page The QoS Policies Advanced page (...
Page 330 - IGMP Snooping; AVVID Priority Mapping; Adjusting Radio Access Categories
15-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Configuring QoS IGMP Snooping When Internet Group Membership Protocol (IGMP) snooping is enabled on a switch and a client roams from one access point to another, the clients’ multicast...
Page 332 - Configuring Nominal Rates; Optimized Voice Settings; Configuring the Radio
15-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Configuring QoS Note In this release, clients are blocked from using an access category when you select Enable for Admission Control. Configuring Nominal Rates When an access point rec...
Page 333 - Enabling Admission Control; Troubleshooting Admission Control
15-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS Configuring QoS Step 3 Enter the maximum percentage of the channel to be used for voice in the Max Channel Capacity (%) field. Step 4 Enter the maximum percentage of the channel to use...
Page 334 - QoS Configuration Examples; Giving Priority to Voice Traffic
15-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS QoS Configuration Examples QoS Configuration Examples These sections describe two common uses for QoS: • Giving Priority to Voice Traffic, page 15-14 • Giving Priority to Video Traffic...
Page 335 - Giving Priority to Video Traffic
15-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 15 Configuring QoS QoS Configuration Examples Figure 15-5 QoS Policies Page for Voice Example The network administrator also enables the QoS element for wireless phones setting on the QoS Policies - Adva...
Page 338 - Understanding Filters; Configuring Filters Using the CLI
16-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Understanding Filters Understanding Filters Protocol filters (IP protocol, IP port, and Ethertype) prevent or allow the use of specific protocols through the access point’s Ethernet...
Page 339 - Configuring Filters Using the Web-Browser Interface; Configuring and Enabling MAC Address Filters
16-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Configuring Filters Using the Web-Browser Interface This section describes how to configure and enable filters using the web-brow...
Page 340 - Creating a MAC Address Filter
16-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Figure 16-1 MAC Address Filters Page Follow this link path to reach the Address Filters page: 1. Click Services in the page navig...
Page 344 - Creating a Time-Based ACL
16-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Step 6 Click Apply . Creating a Time-Based ACL Time-based ACLs are ACLs that can be enabled or disabled for a specific period of ...
Page 345 - ACL Logging; Configuring and Enabling IP Filters
16-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface ACL Logging ACL logging is not supported on the bridging interfaces of AP platforms. When applied on bridging interface, it will ...
Page 347 - Creating an IP Filter
16-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Creating an IP Filter Follow these steps to create an IP filter: Step 1 Follow the link path to the IP Filters page. Step 2 If y...
Page 348 - Configuring and Enabling Ethertype Filters
16-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Step 15 When the filter is complete, click Apply . The filter is saved on the access point, but it is not enabled until you appl...
Page 349 - Creating an Ethertype Filter
16-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 16 Configuring Filters Configuring Filters Using the Web-Browser Interface Figure 16-8 Ethertype Filters Page Follow this link path to reach the Ethertype Filters page: 1. Click Services in the page navi...
Page 352 - Understanding CDP
17-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 17 Configuring CDP Understanding CDP Understanding CDP Cisco Discovery Protocol (CDP) is a device-discovery protocol that runs on all Cisco network equipment. Each device sends identifying messages to a m...
Page 353 - Disabling and Enabling CDP
17-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 17 Configuring CDP Configuring CDP Use the no form of the CDP commands to return to the default settings. This example shows how to configure and verify CDP characteristics: AP# configure terminal AP(conf...
Page 354 - Disabling and Enabling CDP on an Interface; Monitoring and Maintaining CDP
17-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 17 Configuring CDP Monitoring and Maintaining CDP This example shows how to enable CDP. AP# configure terminal AP(config)# cdp run AP(config)# end Disabling and Enabling CDP on an Interface CDP is enabled...
Page 360 - Understanding SNMP; SNMP Versions
18-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Understanding SNMP Understanding SNMP SNMP is an application-layer protocol that provides a message format for communication between SNMP managers and agents. The SNMP manager can be p...
Page 361 - SNMP Manager Functions
18-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Understanding SNMP Table 18-1 lists the SNMP versions and security levels supported on access points: For detailed information on SNMPv3, click this link to browse to the New Feature D...
Page 362 - SNMP Agent Functions; SNMP Community Strings; Using SNMP to Access MIB Variables
18-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Understanding SNMP SNMP Agent Functions The SNMP agent responds to SNMP manager requests as follows: • Get a MIB variable—The SNMP agent begins this function in response to a request f...
Page 364 - Configuring Community Strings
18-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Configuring SNMP Configuring Community Strings You use the SNMP community string to define the relationship between the SNMP manager and the agent. The community string acts like a pas...
Page 365 - Specifying SNMP-Server Group Names
18-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Configuring SNMP To disable access for an SNMP community, set the community string for that community to the null string (do not enter a value for the community string). To remove a sp...
Page 366 - Configuring SNMP-Server Hosts
18-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Configuring SNMP Configuring SNMP-Server Hosts To configure the recipient of an SNMP trap operation, use the following command in global configuration mode: Configuring SNMP-Server Use...
Page 368 - Setting the Agent Contact and Location Information; SNMP Examples
18-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Configuring SNMP To remove the specified host from receiving traps, use the no snmp-server host host global configuration command. To disable a specific trap type, use the no snmp-ser...
Page 370 - Displaying SNMP Status
18-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 18 Configuring SNMP Displaying SNMP Status AP(config)# snmp-server group admin v3 priv read iso write iso AP(config)# snmp-server user joe admin v3 auth md5 xyz123 priv des56 key007 AP(config)# snmp-serv...
Page 372 - Understanding Repeater Access Points
19-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Understanding Repeater Access Points Understanding Repeater Access Points A repeater access point is not connected to the wired ...
Page 373 - Configuring a Repeater Access Point
19-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring a Repeater Access Point Figure 19-1 Access Point as a Repeater Configuring a Repeater Access Point This section prov...
Page 374 - Default Configuration
19-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring a Repeater Access Point Default Configuration Access points are configured as root units by default. Table 19-1 show...
Page 375 - Setting Up a Repeater
19-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring a Repeater Access Point Setting Up a Repeater Beginning in Privileged Exec mode, follow these steps to configure an ...
Page 376 - Aligning Antennas
19-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Aligning Antennas The following example shows how to set up a repeater access point with three potential parents, designated 1 t...
Page 377 - Verifying Repeater Operation
19-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Aligning Antennas Use the show dot11 antenna-alignment command to list the MAC addresses and signal level for the last 10 device...
Page 378 - Setting Up a Repeater As a WPA Client
19-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Aligning Antennas Setting Up a Repeater As a WPA Client WPA key management uses a combination of encryption methods to protect c...
Page 379 - Understanding Hot Standby
19-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Understanding Hot Standby Understanding Hot Standby Hot Standby mode designates an access point as a backup for another access p...
Page 380 - Configuring a Hot Standby Access Point
19-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring a Hot Standby Access Point Configuring a Hot Standby Access Point When you set up the standby access point, you mus...
Page 382 - Verifying Standby Operation
19-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring a Hot Standby Access Point After you enable standby mode, configure the settings that you recorded from the monitor...
Page 383 - Understanding Workgroup Bridge Mode
19-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Understanding Workgroup Bridge Mode Use this command to check the standby configuration: show iapp standby-parms This command d...
Page 386 - Configuring a Workgroup Bridge for Roaming; Configuring a Workgroup Bridge for Limited Channel Scanning; Configuring the Limited Channel Set
19-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Understanding Workgroup Bridge Mode bridges, that can associate to an access point or bridge. To increase beyond 20 the number ...
Page 387 - Ignoring the CCX Neighbor List; Configuring a Client VLAN; Workgroup Bridge VLAN Tagging
19-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Workgroup Bridge VLAN Tagging The following example shows how the command is used. In the example, channels 1, 6, and 11 are sp...
Page 388 - Configuring Workgroup Bridge Mode
19-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Configuring Workgroup Bridge Mode In the upstream direction, WGB removes the 802.1q header from the packet while sending to the...
Page 390 - Using Workgroup Bridges in a Lightweight Environment
19-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Using Workgroup Bridges in a Lightweight Environment This example shows how to set up a workgroup bridge with the parent access...
Page 392 - Sample Workgroup Bridge Configuration
19-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Using Workgroup Bridges in a Lightweight Environment • When you delete a workgroup bridge record from the controller, all of th...
Page 393 - Enabling VideoStream Support on Workgroup Bridges
19-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode Using Workgroup Bridges in a Lightweight Environment Enabling VideoStream Support on Workgroup Bridges VideoStream improves the...
Page 395 - Working with the Flash File System
C H A P T E R 20-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 20 Managing Firmware and Configurations This chapter describes how to manipulate the Flash file system, how to copy configuration files, and how to archive (upload and download) software images. Not...
Page 396 - Displaying Available File Systems
20-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with the Flash File System Displaying Available File Systems To display the available file systems on your access point, use the show file systems privilege...
Page 397 - Setting the Default File System
20-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with the Flash File System Setting the Default File System You can specify the file system or directory that the system uses as the default file system by u...
Page 398 - Creating and Removing Directories; Copying Files
20-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with the Flash File System Creating and Removing Directories Beginning in privileged EXEC mode, follow these steps to create and remove a directory: To dele...
Page 399 - Deleting Files; Creating, Displaying, and Extracting tar Files; Creating a tar File
20-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with the Flash File System • From a startup configuration to a startup configuration • From a device to the same device (for example, the copy flash: flash:...
Page 400 - Displaying the Contents of a tar File
20-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with the Flash File System • For the Trivial File Transfer Protocol (TFTP), the syntax is tftp: [[ // location ] / directory ] / tar-filename .tar The tar-f...
Page 401 - Extracting a tar File; Displaying the Contents of a File; Working with Configuration Files
20-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files Extracting a tar File To extract a tar file into a directory on the Flash file system, use this privileged EXEC command: archive ta...
Page 402 - Guidelines for Creating and Using Configuration Files
20-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files You can copy ( download ) configuration files from a TFTP, FTP, or RCP server to the running configuration of the access point for ...
Page 403 - Configuration File Types and Location; Creating a Configuration File by Using a Text Editor; Copying Configuration Files by Using TFTP
20-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files configuration is used. However, some commands in the existing configuration might not be replaced or negated. In this case, the res...
Page 404 - Downloading the Configuration File by Using TFTP
20-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files Preparing to Download or Upload a Configuration File by Using TFTP Before you begin downloading or uploading a configuration file ...
Page 405 - Uploading the Configuration File by Using TFTP; Copying Configuration Files by Using FTP
20-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files The configuration file downloads, and the commands are executed as the file is parsed line-by-line. This example shows how to conf...
Page 406 - Preparing to Download or Upload a Configuration File by Using FTP; Downloading a Configuration File by Using FTP
20-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files • The access point forms a password named [email protected] . The variable username is the username associated with the curre...
Page 407 - Uploading a Configuration File by Using FTP
20-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files This example shows how to copy a configuration file named host1-confg from the netadmin1 directory on the remote server with an IP...
Page 408 - Copying Configuration Files by Using RCP
20-14 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files This example shows how to copy the running configuration file named ap2-confg to the netadmin1 directory on the remote host with a...
Page 409 - Preparing to Download or Upload a Configuration File by Using RCP
20-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files access to a server that supports the remote shell (rsh). (Most UNIX systems support rsh.) Because you are copying a file from one ...
Page 410 - Downloading a Configuration File by Using RCP
20-16 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files ap1.company.com ap1 For more information, refer to the documentation for your RCP server. Downloading a Configuration File by Usin...
Page 411 - Uploading a Configuration File by Using RCP; Clearing Configuration Information
20-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Configuration Files %SYS-5-CONFIG_NV:Non-volatile store configured from host2-config by rcp from 172.16.101.101 Uploading a Configuration File by Usin...
Page 412 - Deleting a Stored Configuration File; Working with Software Images; Image Location on the Access Point
20-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images Deleting a Stored Configuration File Caution You cannot restore a file after it has been deleted. To delete a saved configuration from...
Page 413 - tar File Format of Images on a Server or Cisco.com; Copying Image Files by Using TFTP; Preparing to Download or Upload an Image File by Using TFTP
20-19 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images tar File Format of Images on a Server or Cisco.com Software images located on a server or downloaded from Cisco.com are provided in a ...
Page 414 - Downloading an Image File by Using TFTP
20-20 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images Note You must restart the inetd daemon after modifying the /etc/inetd.conf and /etc/services files. To restart the daemon, either stop...
Page 416 - Uploading an Image File by Using TFTP; Copying Image Files by Using FTP
20-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images The algorithm installs the downloaded image on the system board Flash device (flash:). The image is placed into a new directory named ...
Page 417 - Preparing to Download or Upload an Image File by Using FTP
20-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images • Downloading an Image File by Using FTP, page 20-24 • Uploading an Image File by Using FTP, page 20-26 Preparing to Download or Uploa...
Page 418 - Downloading an Image File by Using FTP
20-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images For more information, refer to the documentation for your FTP server. Downloading an Image File by Using FTP You can download a new im...
Page 420 - Uploading an Image File by Using FTP
20-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images If you specify the /leave-old-sw , the existing files are not removed. If there is not enough space to install the new image and keep ...
Page 421 - Copying Image Files by Using RCP; Preparing to Download or Upload an Image File by Using RCP
20-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images The archive upload-sw command builds an image file on the server by uploading these files in order: info, the Cisco IOS image, the HTM...
Page 423 - Downloading an Image File by Using RCP
20-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images Downloading an Image File by Using RCP You can download a new image file and replace or keep the current image. Caution For the downlo...
Page 425 - Uploading an Image File by Using RCP
20-31 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images Note If the Flash device has sufficient space to hold two images and you want to overwrite one of these images with the same version, ...
Page 426 - Reloading the Image Using the Web Browser Interface; Browser HTTP Interface
20-32 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images The archive upload-sw privileged EXEC command builds an image file on the server by uploading these files in order: info, the Cisco IO...
Page 427 - Browser TFTP Interface
20-33 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 20 Managing Firmware and Configurations Working with Software Images Step 7 Click the Upgrade button. For additional information, click the Help icon on the Software Upgrade screen. Browser TFTP Interfac...
Page 430 - Understanding System Message Logging; System Log Message Format
21-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Understanding System Message Logging Understanding System Message Logging By default, access points send the output from system messages and debug privileged EXEC com...
Page 432 - Disabling and Enabling Message Logging
21-4 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Disabling and Enabling Message Logging Message logging is enabled by default. It must be enabled to send messages to any destinatio...
Page 433 - Setting the Message Display Destination Device
21-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Setting the Message Display Destination Device If message logging is enabled, you can send messages to specific locations in additi...
Page 434 - Enabling and Disabling Timestamps on Log Messages
21-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Enabling and Disabling Timestamps on Log Messages By default, log messages are not timestamped. Beginning in privileged EXEC mode, ...
Page 435 - Defining the Message Severity Level
21-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging This example shows part of a logging display with sequence numbers enabled: 000019: %SYS-5-CONFIG_I: Configured from console by vty...
Page 436 - Limiting Syslog Messages Sent to the History Table and to SNMP
21-8 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Table 21-3 describes the level keywords. It also lists the corresponding UNIX syslog definitions from the most severe level to the ...
Page 437 - Setting a Logging Rate Limit
21-9 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Beginning in privileged EXEC mode, follow these steps to change the level and history table size defaults: When the history table i...
Page 438 - Configuring UNIX Syslog Servers; Logging Messages to a UNIX Syslog Daemon; Configuring the UNIX System Logging Facility
21-10 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Configuring System Message Logging Configuring UNIX Syslog Servers The next sections describe how to configure the 4.3 BSD UNIX server syslog daemon and define the U...
Page 440 - Displaying the Logging Configuration
21-12 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 21 Configuring System Message Logging Displaying the Logging Configuration Displaying the Logging Configuration To display the current logging configuration and the contents of the log buffer, use the sh...
Page 442 - Checking the Top Panel Indicators
22-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Checking the Top Panel Indicators If your wireless device is not communicating, check the three LED indicators on the top panel to quickly assess the d...
Page 445 - Indicators on 1130 Series Access Points
22-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Note Regarding LED status colors, it is expected that there will be small variations in color intensity and hue from unit to unit. This is within the n...
Page 451 - Indicators on 1240 Series Access Points
22-11 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Indicators on 1240 Series Access Points If your access point is not working properly, check the Status, Ethernet, and Radio LEDs on the 2.4 GHz end of...
Page 453 - Indicators on 1250 Access Points
22-13 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Indicators on 1250 Access Points If your access point is not working properly, check the Ethernet, Status, and Radio LEDs on the 2.4 GHz end of the un...
Page 455 - Indicators on 1260 Series Access Points
22-15 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Note It is expected that there will be small variations in LED color intensity and hue from unit to unit. This is within the normal range of the LED m...
Page 457 - Indicators on 1300 Outdoor Access Point/Bridges
22-17 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Indicators on 1300 Outdoor Access Point/Bridges If your access point/bridge is not associating with a remote bridge or access point, check the four LE...
Page 458 - 300 Series AP Mode LED Indications
22-18 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking the Top Panel Indicators Figure 22-9 LEDs 1300 Series AP Mode LED Indications During access point/bridge operation the LEDs provide status information as shown in Table 22-7 ....
Page 461 - Checking Power; Low Power Condition
22-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking Power • Cisco Aironet Power Injector LR2—standard (included with the bridge) – 48-VDC input power – Uses the 48-VDC power module (included with the bridge) • Cisco Aironet Pow...
Page 462 - Checking Basic Settings; Security Settings
22-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Checking Basic Settings access point remains in low power mode with the radios disabled to prevent a possible over-current condition. In low power mode, the access point activates the ...
Page 463 - Resetting to the Default Configuration; Using the MODE Button
22-23 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Resetting to the Default Configuration Note The wireless device MAC address that appears on the Status page in the Aironet Client Utility (ACU) is the MAC address for the wireless devi...
Page 464 - Using the Web Browser Interface; Using the CLI
22-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Resetting to the Default Configuration Using the Web Browser Interface Follow these steps to delete the current configuration and return all wireless device settings to the factory def...
Page 465 - Reloading the Access Point Image
22-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image flashfs[0]: flashfs fsck took 0 seconds. ...done initializing Flash. Step 5 Use the dir flash: command to display the contents of Flash and find the co...
Page 466 - Using the MODE button
22-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image Using the MODE button You can use the MODE button on 1040, 1100 and 1200 series access points to reload the access point image file from an active Triv...
Page 469 - Obtaining the Access Point Image File
22-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Reloading the Access Point Image extracting c350-k9w7-mx.122-13.JA1/html/level1/appsui.js (558 bytes) extracting c350-k9w7-mx.122-13.JA1/html/level1/back.htm (205 bytes) extracting c35...
Page 470 - Obtaining TFTP Server Software; Image Recovery on the 1520 Access Point
22-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Chapter 22 Troubleshooting Image Recovery on the 1520 Access Point Step 6 Click IOS . A list of available Cisco IOS versions appears. Step 7 Choose the version you wish to download. The download page for the ver...
Page 481 - MIB List
B-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 A P P E N D I X B Supported MIBs This appendix lists the Simple Network Management Protocol (SNMP) Management Information Bases (MIBs) that the access point supports for this software release. The Cisco IOS SNMP a...
Page 482 - Using FTP to Access the MIB Files
B-2 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix B Supported MIBs Using FTP to Access the MIB Files • CISCO-MEMORY-POOL-MIB • CISCO-PROCESS-MIB • CISCO-PRODUCTS-MIB • CISCO-SMI-MIB • CISCO-TC-MIB • CISCO-SYSLOG-MIB • CISCO-WDS-INFO-MIB • ENTITY-MIB • IF...
Page 485 - Software Auto Upgrade Messages
C-3 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Software Auto Upgrade Messages Software Auto Upgrade Messages Error Message SW-AUTO-UPGRADE-2-FATAL_FAILURE: “Attempt to upgrade software failed, software on flash may be delete...
Page 487 - Association Management Messages
C-5 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Association Management Messages Association Management Messages Error Message DOT11-3-BADSTATE: “%s %s ->%s.” Explanation 802.11 association and management uses a table-drive...
Page 488 - Unzip Messages
C-6 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Unzip Messages Error Message DOT11-4-DIVER_USED: Interface $s, Mcs rates 8-15 disabled due to only one transmit or recieve antenna enabled Explanation These rates require that a...
Page 489 - System Log Messages
C-7 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages System Log Messages System Log Messages Error Message %DOT11-4-LOADING_RADIO: Interface [chars], loading the radio firmware ([chars]) Explanation The radio has been stopped to l...
Page 503 - Inter-Access Point Protocol Messages
C-21 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Inter-Access Point Protocol Messages Error Message SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: “IOS crypto FIPS self test passed.” Explanation SOAP FIPS self test passed. Recommended Ac...
Page 504 - Local Authenticator Messages
C-22 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Local Authenticator Messages Local Authenticator Messages Error Message RADSRV-4-NAS_UNKNOWN: Unknown authenticator: [ip-address] Explanation The local RADIUS server received a...
Page 506 - WDS Messages
C-24 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages WDS Messages out before trying the next configured server. A Radius server marked as dead is skipped by additional requests for the duration of the minutes unless all servers a...
Page 507 - Mini IOS Messages
C-25 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Mini IOS Messages Error Message WLCCP-NM-3-WNM_LINK_DOWN: Link to WNM is down Explanation The network manager is not responding to keep-active messages. Recommended Action Chec...
Page 508 - Access Point/Bridge Messages; Cisco Discovery Protocol Messages
C-26 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Access Point/Bridge Messages Error Message Saving this config to nvram may corrupt any network management or security files stored at the end of nvram. Continue? [no]: Explanat...
Page 509 - External Radius Server Error Messages
C-27 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages External Radius Server Error Messages External Radius Server Error Messages Error Message RADUYS:response-authenticator decrypt fail, paklen 32 Explanation This error message m...
Page 510 - Sensor Messages
C-28 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages Sensor Messages Sensor Messages Error Message SENSOR-3-TEMP_CRITICAL: System sensor “d” has exceeded CRITCAL temperature thresholds Explanation One of the measured environmenta...
Page 511 - SNMP Error Messages
C-29 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages SNMP Error Messages Error Message SENSOR-3-VOLT_NORMAL: System sensor “d”(“d”) is now operating under NORMAL voltage Explanation One of the measured environmental test points i...
Page 512 - SSH Error Messages
C-30 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 Appendix C Error and Event Messages SSH Error Messages Error Message SNMP-4-NOENGINEIDV6: Remote snmpEngineID for Unrecognized format ‘ %P’ not found when creating user: “s” Explanation An attempt to create a use...
Page 515 - G L O S S A R Y
GL-1 Cisco IOS Software Configuration Guide for Cisco Aironet Access Points OL-21881-03 G L O S S A R Y 802.11 The IEEE standard that specifies carrier sense media access control and physical layer specifications for 1- and 2-megabit-per-second (Mbps) wireless LANs operating in the 2.4-GHz band. 802...
Cisco MGX-FRSM-HS2
Manual
Cisco 3545
Manual
Cisco Dial NMS
Manual
Cisco DOC-7813565=
Manual
Cisco 2620
Manual
Cisco CP7910GRF
Manual
Cisco ME-C6524GS-8S
Manual
Cisco OL-2056-02
Manual
Cisco TD 92322GB
Manual
Cisco OL-11524-01
Manual
Cisco OL-5532-02
Manual
Cisco VG204XM
Manual
Cisco DS71-MD4
Manual
Cisco 247933900
Manual
Cisco 4.5
Manual