Cisco Systems WAP561AK9 Bedienungsanleitung

Cis c o Small Busine s s W AP551 Wireles s-N A c c e ss Poin t with PoE and W AP561 Wireles s-N S ele c table-B and Ac c e s s Point with PoE ADMINISTR A TION GUIDE[...]

Cisco Small Busines s W AP 121 and W AP321 Wireless-N Acc ess Point with PoE 1 Con te n t s Chapter 1: Getting Started 5 Starting the Web-Based Configuration Utility 5 Using the Access Point Setup Wizard 6 Getting Started 9 Window Navigation 10 Chapter 2: Status and Statistics 12 System Summary 12 Network Interfaces 14 Traffic Statistics 15 WorkGro[...]

Cisco Small Busines s W AP 121 and W AP321 Wireless-N Acc ess Point with PoE 2 Con te n t s Copy/Save Co nfiguration 42 Reboot 43 Discovery—Bonjour 44 Packet Capture 44 Support Information 51 Chapter 4: LAN 52 Port Settings 52 VLAN and IPv4 Address Settings 53 IPv6 Addresses 54 IPv6 Tunnel 56 Chapter 5: Wireless 58 Radio 58 Rogue AP Detection 66 [...]

Cisco Small Busines s W AP 121 and W AP321 Wireless-N Acc ess Point with PoE 3 Con te n t s WPA-PSK Complexity 110 Chapter 7: Client Qu ality of Service 111 Client QoS Global Settings 111 ACL 111 Class Map 118 Policy Map 123 Client QoS Association 125 Client QoS Status 127 Chapter 8: Simple Networ k Management Protocol 129 General SNMP Settings 129[...]

Cisco Small Busines s W AP 121 and W AP321 Wireless-N Acc ess Point with PoE 4 Con te n t s Sessions 160 Channel Management 161 Wireless Neighborhood 165 Chapter A: Deauthentication Message Reason Codes 168 Deauthentication Reason Code Table 168 Appendix B: Where to Go From Here 170[...]

1 Cisco Small Busines s W AP551 and W AP561 Wir eless-N Ac ces s P oint 5 Get ting St ar te d This chapter pr ovides an introduction t o the Wi reless Acc es s P oint (W AP) device s web-b ased c onfiguration utility , and includes thes e t opics : • Star ting the Web-B as ed C onfiguration Utilit y • Using the Acc es s Point Setup Wizard • G[...]

Get ting Star ted Using th e Acc e ss Point Setup W izard Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 6 1 addre s s> ) t o the local intranet zone. The IP addr es s can also be spe cified as the subnet IP addr es s, s o that all addr es ses in the subnet are added t o the local intranet zone. • If you ha ve multiple I[...]

Get ting Star ted Using th e Acc e ss Point Setup W izard Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 7 1 If you alr eady hav e a clust er on your network , y ou can add this device to it by clicking Join an Existing Cluster , and then ent ering the Existing Cluster Name . If you do not want this device to participate in a[...]

Get ting Star ted Using th e Acc e ss Point Setup W izard Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 8 1 STEP 16 F or the W AP561 device, the Net work Name, W ireless S ecurity , and VL AN ID pages show to enable configuring Radio 2. When finished with configuring Radio 2, click Nex t . The Wi zard displa ys the Enable C [...]

Get ting Star ted Getting Star te d Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 9 1 Get ting St ar te d T o simplify device configuration throug h quick navigation, the Getting Star ted page provides links f or p erforming common tasks . The Getting Star ted page is the default window ev er y time you log int o the web-bas[...]

Get ting Star ted W indow Na viga tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 10 1 Window Na viga tion This section describe s the f eatures of the web-bas ed AP configuration utilit y. The Configu ration Utilit y head er contains standard inf ormation and appears at the t op on ever y page. It pr ovides these but ton[...]

Get ting Star ted W indow Na viga tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 11 1 Edit Edits or modifies an e xisting entr y . Sele ct an entry first . Refresh Redisplays the curr ent page with the latest data. Sa v e Sav es the s ettings or c onfiguration. Up da te Updates the new inf ormation t o the star tup confi[...]

2 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 12 St a tus and St a tistic s This chapter describe s how t o displa y status and statistics and contains these top ic s : • System Su mmar y • Net work Interfac es • T ra f fic Statistics • WorkGroup Bridge Transmit /Re c eive • Associ a t ed C l i en ts • TSPEC Cl[...]

Status and Statistic s Syst em Summar y Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 13 2 • Ser ia l Nu m ber — The serial number of the Cisc o W AP device. • Bas e M A C A d d r ess — The W AP MAC addr es s. • Firm ware V ersion (A ctive Image) — The firmwar e version number of the active image. • Firm ware M[...]

Status and Statistic s Network In t er face s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 14 2 - Acti ve —A connection ses sion is established and packets ar e being transmitted and r ec eiv ed. - Establishe d —A conne ction ses sion is established bet ween the W A P device and a ser ver or client , depend ing on the r[...]

Status and Statistic s T r af f ic S t at is ti c s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 15 2 If the V AP has be en configured, the table lists the S SID , the administrative status (up or down ), the MAC addr es s of the radio int erfac e, the VLAN ID , the name of an y asso ciated scheduler profile, and the curr e[...]

Status and Statistic s W orkGr oup Bridge T r ansmit /Receive Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 16 2 W orkGr oup Bridge T ransmit /Re c eive The W orkGr oup Bridge T ransmit /Receive page shows packet and by te counts f or traffic bet ween stations on a W orkGr oup Bridge. F or inf ormation on configuring W orkGr[...]

Status and Statistic s Asso cia ted Clients Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 17 2 The asso ciat ed stations are shown along with inf ormation about packet traffic transmitted and received f or each station. • T otal Numb er of As so ciated Clients — The total number of clients currently as sociated with the [...]

Status and Statistic s TS P EC C l i e n t A s s o c i a t i o n s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 18 2 - TS Violate Pack ets (From Sta tion) —Number of packets sent from a cli en t S T A to the W AP dev ice in e x cess o f it s a cti ve T raffic St r eam ( T S) uplink bandwidth, or f or an acc es s cat egor [...]

Status and Statistic s TS P EC C l i e n t A s s o c i a t i o n s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 19 2 • TS Identifier — TSPEC T raf fic Ses sion Identifier (range 0 to 7). • Acce ss Ca t egor y — TS Acces s Cat egor y (voice or video) . • Direc tion — T raffic direction f or this T S. Direction ca[...]

Status and Statistic s T SPE C Sta tus and Sta tis tics Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 20 2 • Fro m S t ati on —Shows the number of pack ets and by t es received from the wire les s client and the number of pa ck ets and by t es that were dr opped af ter b e in g re c ei ved . - Pack ets —Number of packe[...]

Status and Statistic s T SPE C Sta tus and Sta tis tics Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 21 2 • Status — Whether the T SPEC ses sion is enabled (up) or not (down ) f or the corr esponding Acce ss Category . NOTE Status is a configuratio n status (it doe s not nece ss arily r epresent the current ses sion act[...]

Status and Statistic s TS P EC A P S t a t i st i c s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 22 2 TSPEC AP Sta tistic s The TSPEC AP Statistics page provides inf ormation on the voice and video T raffic Str eams a ccept ed and r eject ed by th e W AP devi ce. T o v iew the T SPEC AP Statistics page, s elect S t atu s [...]

Status and Statistic s Rad i o S tat ist ic s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 23 2 • Fragments T ransmit ted —Number of fragmented frames s ent by the W AP device. • Multicast Frames Re ceive d —Count of MS DU frames received with the multicast bit set in the destination MAC address . • Multicast Fram[...]

Status and Statistic s Em ai l A l er t S tat us Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 24 2 Email Aler t St a tus The Email Aler t Status page pr ovides inf ormation about the email alerts s ent base d on the syslog mes sages generated in the W AP device. T o view the Email Aler t Status page, select St at us a nd St[...]

3 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 25 Administra tion This chapter describe s how t o configure global system settin gs and per f orm diagnostics . It contains the se t opics : • System Set tings • User A cc ounts • Time Set tings • Log S et tings • Email Aler t • HT TP /HT TPS Ser vic e • Manageme[...]

Admin istr a tion Syst em Settings Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 26 3 Sys te m Settin gs The System Set tings page enable s you to configure inf ormation that ide ntifies the W AP device within the net work . T o configure syst em settings : STEP 1 Select Adm inis tr a tion > Sys te m Setti ngs in the navi[...]

Admin istr a tion Use r A ccou n t s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 27 3 STEP 1 Select Adm inis tr a tion > User A cc ounts in the na vigation pane. The User Acc ount T able shows the curr ently configured users. The us er cis co is pr ec onfigur ed in the syst em to ha ve Read/ Writ e privileges . All othe[...]

Admin istr a tion Ti m e S e t t i n g s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 28 3 As you enter a password, the number and color of ver tical bars changes to in di ca te t h e p as s wo rd s tre ng th , as f ol lo w s : • Red— The password f ails t o meet the minimum comple xity requir ements. • Orange— The [...]

Admin istr a tion Ti m e S e t t i n g s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 29 3 STEP 3 Select Adjust Time for Da ylight Savings if daylight savings time is applicable t o your time z one. When sele ct ed, c onfigur e these fields : • Daylight Sa vings Star t —Sele ct the week , day , month, and time when dayl[...]

Admin istr a tion Log Settings Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 30 3 Lo g S et tings Y ou can us e the L o g Sett ings page t o enable log mes sage s t o be saved in permanent memor y . Y ou can als o send logs to a r emote host . If the system une xpectedly reboots, lo g mes sages can b e useful t o diagnos e t[...]

Admin istr a tion Log Settings Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 31 3 The K ernel L og is a comprehensive list of sy stem ev ents (show n in the Syst em L og) and kernel mes sages such as er r or conditions . Y ou cannot view kernel log mes sage s dir ectly from the web int er face. Y ou must first set up a remot[...]

Admin istr a tion Em ai l A l er t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 32 3 NOTE After new settings are sav ed, the co rr esponding proce ss es may be st oppe d and r estar ted. When this happens, the W AP device may lose conne ctivity . We r ec ommend that you change W AP device set tings when a loss of c onnectiv[...]

Admin istr a tion Em ai l A l er t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 33 3 Emergency , Aler t , Critical, Error , Warning, Notice, Inf o, and D ebug. If set to None, then no schedule d severity mes sage s ar e sent . The default severity is Wa r n i n g . • Urgent Me ss age S everit y —Log mes sages of this s [...]

Admin istr a tion Em ai l A l er t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 34 3 STEP 5 Click Te s t M a i l to send a test email t o validate the configured email acc ount . STEP 6 Click Sa ve . The changes ar e saved t o the Star tup Configuration. The f ollowing example shows how t o fill in the Mail Ser ver Configur[...]

Admin istr a tion HT TP /HT TPS Ser vic e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 35 3 HT TP /HT TPS S er vic e Use the HT TP /HTTPS S er vice page t o enable and configur e web-ba sed management connections . If HT TPS is used f or se cur e management ses sions, you also us e the HTTP /HT TPS Ser vic e page to manage [...]

Admin istr a tion HT TP /HT TPS Ser vic e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 36 3 • Redire ct HT TP to HT TPS —Redirects management HT TP ac ces s attempts on the HT TP por t to the HTTPS p ort . Th is field is available only when HTTP acc ess is dis abled. STEP 4 Click Sa ve . The changes ar e saved t o the S[...]

Admin istr a tion Ma na ge m ent Ac c e ss C ont rol Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 37 3 • F or TFTP , ent er the Fil e N am e as it e xists on the TFTP s er ver and the TFTP Serve r I Pv4 Ad dr ess , then click Upload . The filenam e cannot contai n the f ollowing charact ers: spac es , <, >, |, , : [...]

Admin istr a tion Manage Firmw are Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 38 3 Manage Firmwar e The W AP device maintains two firmware images . One image is a ctive and the other is inactive. If the active image fails to load during bo otup, the inactive image is loaded and be comes the active image. Y ou can also swa[...]

Admin istr a tion Manage Firmw are Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 39 3 STEP 3 Enter a name ( 1 to 256 characters ) f or the image file in the Sou r ce F il e N a m e field, including the path t o the direct or y that contains the image to upload. F or example, t o upload the ap_upgra de.tar image located in th[...]

Admin istr a tion Download/B ackup Configur a tion F ile Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 40 3 D ownlo ad/B ackup Configuration F ile The W AP device configuration files ar e in XML f ormat and c ontain all the inf ormation about the W AP devic e settings . Y ou can ba ck up (upload) the configuration files to a[...]

Admin istr a tion Download/B ackup Configur a tion F ile Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 41 3 • Star tup C onfigura tion —Configuration fil e type us ed when the W A P device last booted . This does not i nclud e an y configuration changes applie d but not yet sa ved to the W AP device. • B ackup Configur[...]

Admin istr a tion Configur a tion F iles Proper ties Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 42 3 ! CAU TI O N Ensur e that power to the W AP device rema ins uninterrupt ed while the configuration file is do wnloading. If a power failur e o ccurs while downloading the c onfiguration file, the file is lost and the pr oc[...]

Admin istr a tion Reb o ot Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 43 3 • B ackup Configura tion —Backup configuration file type s av ed on the W AP device. • Mirror Configuration —If the Startup C onfiguratio n is not modified for at least 24 hours , it is aut omatically saved to a Mirr or Configuration file. [...]

Admin istr a tion Disc overy—Bonjour Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 44 3 Dis c over y—B onjour Bonjour enables the W AP device and its ser vice s t o be discover ed by using multicast DNS (mDNS) . Bonjour adver tises s er vices to the network an d answers queries f or the ser vic e typ es that it suppor ts[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 45 3 f ormatted in pcap f ormat and can b e e xamined using t ools such as W ireshark and OmniPeek . • Remot e capture method—Captur ed pack ets are r edirect ed in real time t o an external computer running the W ir eshark tool. The W AP d[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 46 3 • Radio Client Filter —Enables or dis ables the WLAN client filter t o capture only frames that ar e transmitted t o, or received fr om, a WLAN client with a specifie d MAC addr ess . • Client F ilter MA C Addres s —Specifies the M[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 47 3 - br trunk —Linux bridge inter face in the W AP device. • Capture Dura tion —Ent er the time duration in sec onds f or the capture. The range is fr om 10 to 3600 . The default is 60 . • Max Capture F ile Size —Enter the maximum a[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 48 3 When r emote captur e mode is in use, the W AP device do es not st or e any captur ed data locally in its file system. If a fir ewall is installed b etwe en the W ireshark computer and the W AP device, the traffic f or these p or ts must b[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 49 3 -- rpcap://[192.168.1.220]:2002/wl an0 802. 11 traf fic -- rpcap://[192.168.1.220]:2002/ra dio1 At W AP 561 , V AP 1 ~ V AP7 tr a f fic -- rpcap://[ 192.168.1.220]:2002/w lan0vap1 ~ wlan0vap7 At W AP 561 , V AP 1 ~ V AP3 tr a f fic -- rpca[...]

Admin istr a tion Pac ket Ca ptu re Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 50 3 In r emote captur e mode, traffic is s ent t o the computer running W ir eshark through one of the network inter faces. D epending on the location of the Wireshark t ool, the traffic can be s ent on an Ethernet int er fac e or one of the r[...]

Admin istr a tion Supp o r t Inform a tio n Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 51 3 STEP 4 Click Dow nl oad . T o download a packet captur e file using HTTP : STEP 1 Clear Us e TFTP to download the c aptured file . STEP 2 Click Dow nl oad . A confirmation window appears . STEP 3 Click OK . A d ialog box displays t[...]

4 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 52 LA N This chapter describe s how t o configure the port , network , and clock set tings of the W AP device s. It includes thes e t opics: • Por t Set tings • VL AN and IP v4 Addres s S ettings • IPv6 A dd r esses • IP v 6 T unnel Por t S et tings The P or t Set tings[...]

LA N VL AN and IPv4 Address S e tting s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 53 4 STEP 3 If aut onegotiation is disabled, select a Por t Sp ee d (10/ 100/ 1000 Mb/s) and the duplex mode (Half- or Full- duple x) . STEP 4 Enable or disable the Green Ethernet Mode. When enabled, the W AP devic e automatically ent ers a[...]

LA N IPv6 Addr e sse s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 54 4 This VLAN is als o the default untagged VLAN. If you already ha ve a management VLAN configured on your network with a dif f er ent VLAN ID , y ou must change the VLAN ID of the management VL AN on the W AP device . STEP 3 Configure these IP v 4 set ti[...]

LA N IPv6 Addr e sse s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 55 4 STEP 1 Select LA N > IPv6 Ad d r esses in the navigation ar ea. STEP 2 Configure the f ollowing s ettings : • IP v 6 Conne ction Type —Cho ose how the W AP devic e obtains an IPv6 address : - DHCP v 6 — The IP v6 addres s is assigne d by a DHC[...]

LA N IPv6 T u nnel Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 56 4 • IP v 6 Link Loc al Addre ss — The IP v6 address use d by the local physical lin k . The link local addres s is not configurable and is assign ed by using the IP v6 Neighbor Discover y proce ss . • De fault IPv 6 Gatewa y — The statically configur[...]

LA N IPv6 T u nnel Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 57 4 T o configure an IPv6 tunnel using IS A T AP : STEP 1 Select LA N > IP v 6 T unnel in the na vigation ar ea. STEP 2 Configure the f ollowing parameters: • ISA T AP St atus —Enables or disables the administrative mode of IS A T AP on the W AP device.[...]

5 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 58 Wir ele s s This chapter describe s how t o configure pr oper ties of the wireless radio operation. It includes thes e t opics: • Radio • Rogue AP D etec tion • Net works • Sch edu l er • Sch ed ul e r Assoc ia ti on • B andwidth Utilization • MAC F iltering ?[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 59 5 STEP 1 Select Wireles s > Radio in the na vigation pane. STEP 2 In the Global Set tings area, configure the TSPE C Viola tion Inter val , which is the time int er val in seconds f or the W AP device to r epor t associated clients that do not adhere t o ma[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 60 5 By default , when the radio mode includes 802. 11 n, the channel bandwidth is s et to 2 0/ 4 0 M Hz to e na bl e b o th ch an ne l w id th s . Se t t he fi el d to 20 MH z to r estrict the us e of the channel bandwidth to a 20 MHz channel. • Primar y Chann[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 61 5 - Ye s — The W AP device transmits data using a 400-nanosec ond guar d Int er val when c ommunicating with clients that also supp or t the shor t guard int er val. Y e s is the default selection. - No — The W AP device transmits data usin g an 800-nanos [...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 62 5 The fragmentation threshold is a way of limiting the size of packets (frames) transmitted over the network . If a packet e x cee ds the fragmentation threshold y ou set , the fragmentation func tion is activat ed and the packet is sent as multiple 802. 11 fr[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 63 5 The default value of 100 percent can be more cost-efficient than a lower percentage becaus e it gives the W A P device a maximum broadcast range and r educes the n umbe r of access poin ts n eeded. T o increase the capacity of the network , plac e W AP devic[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 64 5 The W AP devic e suppor ts MCS index es 0 to 23. MSC ind e x 23 allows f or a maximum transmission rate of 450 Mbps . If no MC S inde x is selected, the radio operates at MCS index 0 , which allows f or a maximum transmis sion rate of 1 5 Mbps . The MC S set[...]

Wireless Rad i o Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 65 5 - Off —A station can send and receive voice priority traffic without r equiring an admitted TSPEC ; the W AP device ignores voice T SPEC r eque sts from client stations. • TSPEC V oice ACM Limit — The upper limit on the amount of traffic the W AP d e v[...]

Wireless Ro gu e AP D ete ct i on Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 66 5 ! CAU TI O N After new settings are sav ed, the co rr esponding proce ss es may be st oppe d and r estar ted. When this happens, the W AP device may lose conne ctivity . We r ec ommend that you change W AP device set tings when a loss of c o[...]

Wireless Ro gu e AP D ete ct i on Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 67 5 NOTE The Detect ed Rogue AP List and T rus ted AP List pr ovide inf ormati on. The W AP device doe s not hav e any control over the APs on the list and cannot apply any security p olicies to APs det ected thr ough the RF scan. • MA C Addre[...]

Wireless Ro gu e AP D ete ct i on Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 68 5 - 5 indicates IEEE 802. 11 a or 802. 11 n mo de (or both modes). • Channel — The channel on which the rogue AP is currently br oadcasting. The channel defines the por tion of the radio spe ctrum that the radio uses f or transmitting a nd[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 69 5 T o impor t an AP list fr om a file, use the se steps: STEP 1 In the Download/Backup T rusted AP List ar ea, select D ownlo ad (PC to AP) . STEP 2 Click Browse and choos e the file to impor t . Th e fi le t ha t y ou im p or t mu s t b e a p la i n- tex t f[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 70 5 The SS ID can be any alphanumeric, case-sensitive entr y from 2 t o 32 charact ers. The printable characters plus the space (AS CII 0x20) are allowed, but these six charact ers are not: ?, ", $, [, , ], and +. The allowable charact ers are: AS CII 0x2[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 71 5 ! CAU TI O N Be sur e to ent er a VLAN ID that is properly configured on the network . Network pr oblems can result if the V AP ass ociates wir eless clients with an improperly configured VL AN. When a wireless client conne cts to the W AP device by using t[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 72 5 - Dyna mic WEP - WP A Personal - WP A Enterprise If you select a securit y mode other than None, additional fields appe ar . NOTE W e recommend using WP A P ersonal or WP A Enterprise as the authentication typ e as it pr ovides stronger securit y prot ectio[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 73 5 NOTE T o delete a V AP , select the V AP and click De le te . T o sav e your deletion permanently , click Sa v e when complet e. These s ections describe the s ecurit y settings that you configure, depending on your selection in the Securit y list on the Ne[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 74 5 - AS CII — Include s uppercase and lowercase alphabetic letters, the numeric digits, and sp ecial symbols such as @ and #. - Hex — Includes digits 0 to 9 and the letters A t o F . Use the same number of characters f or each key as specified in the Chara[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 75 5 If you use Static WEP , the se rules apply : • All client stations must ha ve the W ire les s LAN ( WLAN) se curity set to WEP , and all clients must hav e one of the WEP keys specified on the W AP device in or der to decode AP -to-station data transmissi[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 76 5 • Us e Glob al R ADIU S Se r ver S et tings —By def ault , each V AP uses the global R ADIUS s ettings that you define for the W AP device (see RAD I US Serve r ). However , you can configure each V AP to use a diff erent set of RA D IU S s e rv er s. T[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 77 5 • Enable R ADIUS Ac counting —Enables tracking and measuring of the r es our ces a par ticular user has consum ed, such as syst em time, amount of data transmitted and r eceived, and so on. If you enable R ADIUS accounting, it is enable d f o r the prim[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 78 5 • Cipher Suite s — The cipher suite you want t o use : - TKIP - CCMP ( AES) Y ou can sele ct either or both. Both TKIP and AES clients can ass ociate with the W AP device. WP A clients must have one of these k eys t o be able to as sociate with the W AP[...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 79 5 - WP A2 —If all client stations on the network suppor t WP A 2, we suggest using WP A 2 which provides the be st securit y per the IEEE 802. 11 i standard. - WP A and WP A2 —If you ha ve a mix of clients , some of which suppor t WP A 2 and others which [...]

Wireless Networks Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 80 5 T o use a separate R ADIUS ser ver f or the V AP , uncheck the box and ent er the R ADIUS ser ver IP addres s and k ey in these fields : • Serve r I P Ad d ress T ype — The IP version that the R ADIUS ser ver uses . Y ou can toggle bet ween the addr es [...]

Wireless Sch edu l er Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 81 5 The default is 300 seconds. The valid range is fr om 0 to 86400 sec onds. A value of 0 indicates that the br oadcast key is not r efr eshe d. • Se s sion K ey Refresh Rate — The int er val at which the W AP device r efreshes se ssion (unicast) keys [...]

Wireless Sch edu l er Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 82 5 - Administrative Mode is disa bled—Op erationa l status is down because global configur ation is disabled. STEP 3 T o add a pro file, enter a pr ofile name in the Sche duler Profile C onfigura tion tex t bo x an d c lic k Ad d . The pr ofile name can [...]

Wireless Sch edu l er As soci a tio n Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 83 5 S cheduler A s s o ci a tion The Scheduler profiles need t o be as sociated with the WLAN interface or a V AP interface to be eff ective. By default , ther e ar e no Scheduler profiles cr eat ed, and no profile is associated with any rad[...]

Wireless MAC Filt ering Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 84 5 The valid int eger range is fr om 0 to 100 percent . The default is 70 per cent . When set to 0 , all new asso ciations are allowed r egardless of the utilization rate. STEP 4 Click Sa ve . The changes ar e saved t o the Star tup Configuration. NOTE A[...]

Wireless WDS Bridge Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 85 5 The MAC addr es s appears in the St a tions List . STEP 4 Continue entering MAC address es until the list is complete, and then click Sa v e . The changes are sa ved to the Startup Configuration. NOTE T o r emov e a MAC addr ess from the Stations List , s[...]

Wireless WDS Bridge Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 86 5 In the point -to-multipoint bridge mode, one W AP device acts as the common link bet ween multiple acc es s points . In this mode, the centr al W AP device acc epts client ass ociations and communicates with the clients and other repeat ers . All other ac[...]

Wireless WDS Bridge Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 87 5 STEP 1 Select Wireles s > WDS Bridge in the na vigation pane. STEP 2 Select Enable fo r Sp anning T ree Mo de . When enabled, STP helps prev ent swit ching loop s. STP is r ecommended if you configure WDS links .F or W AP561 devices , select Radio 1 or[...]

Wireless WDS Bridge Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 88 5 ! CAU TI O N After new settings are sav ed, the co rr esponding proce ss es may be st oppe d and r estar ted. When this happens, the W AP device may lose conne ctivity . We r ec ommend that you change W AP device set tings when a loss of c onnectivit y wi[...]

Wireless Wo r k G r o u p B r i d g e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 89 5 W orkGroup Bridge The W AP device WorkGr oup Bridge f eature enables the W AP device to e xtend the acce ssibilit y of a r emote network . In W orkGr oup Bridge mode, the W AP devic e acts as a wir eles s station (S T A) on the wireless [...]

Wireless Wo r k G r o u p B r i d g e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 90 5 Bef or e you configure W orkGroup Bridge on the W AP device, note these guideline s: • All W AP d evices par ticipating in W orkGroup Bridge must hav e the f ollowing identical set tings : - Radio - IEEE 802. 11 Mode - Channel Bandwidt[...]

Wireless Wo r k G r o u p B r i d g e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 91 5 - WP A Enterprise • VL AN ID — The VL AN ass ociated with the BS S. NOTE The Infrastructur e Client Int erface will be as sociated with the upstream W AP device with the configured credentials . The W AP device ma y obtain its IP add[...]

Wireless Qualit y of Ser vic e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 92 5 • VL AN ID —C onfigur e the Acc ess Point Interface with the same VL AN ID as advertise d on the Infras tructur e Client Int er face. STEP 6 Click Sa ve . The changes ar e saved t o the Star tup Configuration. The asso ciat ed downstream cl[...]

Wireless Qualit y of Ser vic e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 93 5 These fo ur queues are defined f or diff er ent t ypes of data transmitted from W AP - t o-station. If you choos e a Cust om t emplate , the paramet ers that define the queue s are configurable ; other wise, they are set t o pr edefined values [...]

Wireless Qualit y of Ser vic e Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 94 5 After the Maximum Contention W indow size is r eached, retries continue until a maximum number of retries allowe d is r eached. V alid value s ar e 1 , 3, 7 , 15, 31 , 63, 127 , 255, 511 , or 1023. This value must b e higher than the value f or[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 95 5 ! CAU TI O N After new settings are sav ed, the co rr esponding proce ss es may be st oppe d and r estar ted. When this happens, the W AP device may lose conne ctivity . We r ec ommend that you change W AP device set tings when a loss of c onnectivit y w[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 96 5 The two devices disas so ciat e, and then r easso ciat e and authentica te with the new set tings. • A user wishes to enr oll a client station on a WPS-enabled WLAN by supplying the W AP device administrator with the PIN of the client device. The admin[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 97 5 The W AP devic es act as AP devices and supp or t a built -in registrar . They do not function as an enrollee. The administrator can enable or disable WP S on only one V A P . WPS is operational only if this V AP me ets these c onditions: • The W AP de[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 98 5 The PBC method is when the us er of a pr ospe ctive client pushes a button on the enrolling device, and the administrator of the W A P device with an enabled built-in r egistrar pushe s a similar (har dwar e or soft ware) button. This sequence begins the[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 99 5 The PIN metho d of enrollment is potentia lly vulnerable by way of brut e f orce attacks . A network intruder could tr y to pos e as an e xternal r egistrar on the wire les s LAN and at t empt to deriv e the PIN value of the W AP device by ex haustively [...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 100 5 NOTE The r egistration proces s can also configure the W AP device as specifie d in the V AP Configuration Changes s ection, if the W A P device has declared within the WPS- specific IEs of its beacon frame s or UP nP mes sages that it r equires such co[...]

Wireless WPS S e tup Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 101 5 • WPS Devic e Name —Provides a default device name. Y ou can assign a differ ent name fr om 1 t o 32 charact ers , including spaces and sp ecial charact ers. • WPS Glob al Operational Status — Whether the WP S operational status is Up or Down on[...]

Wireless WP S P r ocess Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 102 5 The operational status of the instance and the r eason f or that status appears. See Enabling or Disabling WPS on a V AP f or inf ormation ab out conditions that ma y cause the instance to be disabled. The Instance Status area shows the f ollowing in[...]

Wireless WP S P r ocess Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 103 5 STEP 4 W ithin two minutes , ent er the W AP pin on the soft ware int erfac e of the client device. The W AP pin is c onfigured on the WPS Setup page. When you ent er the PIN on the client de vice, the WPS Operational Status changes t o Adding Enroll[...]

Wireless WP S P r ocess Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 104 5 • WPS Configuration State — Whether the V AP will b e configured fr om the external r egistrar as a par t of the WPS pr oc ess . • Tr an s a c t i o n S t a tu s — The status of the last WPS transaction. The pos sible values are None, Succes [...]

6 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 105 System S e curit y This chapter describe s how t o configur e securit y set tings on the W AP device device. It contains the se t opics : • RA DI US Se rv e r • 802. 1 X Supplic ant • Password Complexit y • WP A-PSK Complexit y R ADIUS S er ver Several f eatur es re[...]

System Securit y RAD I U S Se rve r Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 106 6 STEP 1 Select Sy ste m Secu ri t y > RA D I U S S e rv e r in the na vigation pane. STEP 2 Enter the paramet ers : • Serve r I P Ad d ress T ype — The IP version that the R ADIUS ser ver uses . Y ou can toggle bet ween the addr es [...]

System Securit y 802. 1 X Supplican t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 107 6 802. 1 X Supplic ant IEEE 802. 1 X authentication enables the acce s s point to gain acces s t o a secured wired network . Y ou can enable the ac ces s point as an 802. 1 X supplicant (client) on the wired network . A user name and pass[...]

System Securit y 802. 1 X Supplican t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 108 6 • Pas sword — The W AP device us es this MD5 pas swor d when responding to r eque sts fr om an 802. 1X authenticator . The password can be 1 to 64 charact ers in length. AS CII-printable cha racters ar e allowed, which includes uppe[...]

System Securit y Passw or d Complexit y Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 109 6 Pas sword Complexit y Y ou can c onfigur e complexity requirements f or pas swords used t o acc ess the W AP device c onfiguration utility . Complex passwords incr ease se curity . T o configure password comple xity requirements: STEP[...]

System Securit y WP A-PSK Complexit y Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 110 6 WP A-PSK C omplexit y When you configure V APs on the W AP devic e, you can select a method of securely authenticating clients. If you sele ct the WP A P ersonal prot oc ol (also known as WP A pre-shar ed key or WP A-PSK) as the s ecuri[...]

7 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 111 Client Qualit y of S er vic e This chapter pr ovides an overview of Client qualit y of ser vic e (QoS) and explains the QoS f eatur es available fr om the Clie nt QoS menu. It contains thes e t opics : • Client QoS Glob al S ettings • ACL • Class Map • Policy Map ?[...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 112 7 The W AP devic e suppor ts up to 50 IP v 4, IPv6, and MAC ACLs . IP ACLs classify traf fic f or Layers 3 and 4. Each ACL is a set of up t o 10 rules applied to traffic sent or received by the W AP device. Each rule specifies whether the c ont[...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 113 7 • AC L N a me —A name to identify the ACL . The ACL name can include from 1 t o 31 alphanumeric characters and the f ollowing sp ecial characters: hyphen, underscore, backslash, and colon. Space s ar e not allowed. • AC L T y p e — Th[...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 114 7 If you select this field, you cannot co nfigure an y additional mat ch crit eria. The Match E very Pack et option is selected by default f or a new rule. Y ou must clear the option t o configure other mat ch fields. F or IP v 4 ACLs , configu[...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 115 7 0 to 1023— W ell Known Ports 1024 t o 49151 —Register ed P or ts 49152 t o 65535—D ynamic and/ or Private P ort s • Dest in a t io n IP Ad dr ess —Requir es a packet's destination IP address to match the addr ess listed here. E[...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 116 7 - Match to V alue —A custom DSCP value, from 0 to 63. • I P P r ecede n ce —Matches pack ets base d on their IP Pr ecedenc e value. If selected, enter an IP Precedence value from 0 to 7 . • IP TOS Bits —Specifies a value to use the [...]

Client Quality of S er vice ACL Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 117 7 • De stination IP v6 A ddr es s —Sele ct this field t o requir e a pack et's destination IP v6 address to mat ch the addr es s list ed here. Ent er an IP v6 addr es s in the appr opriat e field t o apply this crit eria. • De stinat[...]

Client Quality of S er vice Class Map Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 118 7 F or each bit po sition in the MA C mask , a 0 indicates that the corresponding addr es s bit is significant and a 1 indicat es that the address bit is ignor ed. F or ex ample, to check only the first f our octets of a MA C address , a [...]

Client Quality of S er vice Class Map Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 119 7 applications , such as email and file transf er , a slight degradation in s er vice is acce ptable and in man y cases unnoticeable. However , on applications with strict timing requir ements, such as voic e or mu ltimedi a, an y degrada[...]

Client Quality of S er vice Class Map Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 120 7 • Match Every Packet — The mat ch condition is true to all the paramet ers in a Lay er 3 pack et . When selected, all Lay er 3 pack ets will match the condition. • Proto col —Us e a La yer 3 or Lay er 4 prot o col match conditio[...]

Client Quality of S er vice Class Map Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 121 7 A DiffS er v mask of 255.255.255.25 5 indica tes that all bits are impor tant , and a mask of 0 .0.0 .0 indicat es that no bits ar e impor tant . The opposite is true with an ACL wildcar d mask . F or e xample, t o match the crit eria t[...]

Client Quality of S er vice Class Map Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 122 7 0 to 1023— W ell Known Ports 1024 t o 49151 —Register ed P or ts 49152 t o 65535—D ynamic and/ or Private P ort s • EtherType —C ompar es the match crit eria agai nst the value in the header of an Ethernet frame. Select an Eth[...]

Client Quality of S er vice Pol ic y Ma p Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 123 7 • VL AN ID —A VL AN ID to be matched f or pack ets. The VL AN ID range is fro m 0 to 4095. The f ollowing Ser vice T ype fields show f or IPv 4 only . Y ou can sp ecify one t ype of ser vice to use in matching pack ets t o class[...]

Client Quality of S er vice Pol ic y Ma p Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 124 7 STEP 1 Select Clien t QoS > Policy Ma p in the na vigation pane. STEP 2 Enter a Policy Map Name The name can include fr om 1 to 31 alphanumeric charact ers and the f ollowing special characters: hyphen, undersc or e, backslash, a[...]

Client Quality of S er vice Client QoS Asso ciat ion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 125 7 • Mark IP Prec edenc e —Marks all pack ets f or the as sociated tra ffic stream with the specifie d IP pr ece dence value. The IP pr eced ence value is an in te ge r f rom 0 to 7 . • Di sa ssoci a t e C l ass Ma p ?[...]

Client Quality of S er vice Client QoS Asso ciat ion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 126 7 • Client QoS Mo de —Select Enable to enable clie nt QoS functionalit y on the selected V AP . • B andwidth Limit Down — T he maximum allowed transmis sion rat e from the W AP device to the client in bits per se co[...]

Client Quality of S er vice Client Q oS Sta tus Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 127 7 STEP 6 Click Sa ve . The changes ar e saved t o the Star tup Configuration. Client Q oS Status The Client QoS Status page shows the client QoS settings that are applied t o each client curr ently ass ociat ed w ith th e W AP d[...]

Client Quality of S er vice Client Q oS Sta tus Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 128 7 • AC L T y p e D o wn — The t ype of ACL t o apply to traffic in the outbound (W AP -t o-client) dir ection, which can be one of these options : - IP v 4: The A CL examines IPv4 pack ets f or matches to A CL rules . - IP v[...]

8 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 129 Simple Net w ork Management Protoc ol This chapter describe s how t o configure the Simple Network Management Prot ocol (S NMP) to per f orm configuration and statistic s gathering tasks. It contains the se t opics : • General SNMP S et tings • Views • Group s • Use[...]

Simple Net work Management Protoc ol General SNMP Sett ings Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 130 8 The communit y name acts as a simple authentication f eatur e to r estrict the machines on the net work that can r equest data to the SNMP agent . The name functions as a pa s swor d, and the r equest is assume d t[...]

Simple Net work Management Protoc ol General SNMP Sett ings Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 131 8 in a subnetwork range is alwa ys reser ved f or the subnet address , and the addr es s identified by .255 in the range is always r eser ved f or the broadcast address .) As another example, if you ent er a range of[...]

Simple Net work Management Protoc ol Vi e w s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 132 8 Views An SN MP MIB view is a family of view subtr ees in the MIB hierarchy . A view subtree is identified by the pairing of an Object Identifier (OID) subtr ee value with a bit string ma sk value. Each MIB view is defined by t w[...]

Simple Net work Management Protoc ol Group s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 133 8 A family mask is used to define a f amily of view subtr ees . The family mask indicat es which subidentifiers of the ass ociated fa mily OID string ar e significant t o the family's defini tion . A f amily of view subtrees e[...]

Simple Net work Management Protoc ol Group s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 134 8 STEP 1 Select SNMP > Gr oup s in the na vigation pane. STEP 2 Click Add t o cr eate a new r ow in the SNMP v3 Groups table. STEP 3 Check the box f or the new gr oup and click Edit . STEP 4 Configure the paramet ers: • Group [...]

Simple Net work Management Protoc ol Users Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 135 8 Us ers Y ou can us e the SNMP Users page to define users, as sociate a securit y level t o each user , and configure securit y k eys per -user . Each user is mapped to an SNMP v3 gr oup, either from the pr edefined or user - define[...]

Simple Net work Management Protoc ol Ta r g e t s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 136 8 • Encr yption Pass Phras e —(If you specify DES as the privacy type) A pas s phrase to use t o encr ypt the SNMP requests . The pas s phrase must be bet ween 8 and 32 characters in length. STEP 5 Click Sa ve . The user i[...]

Simple Net work Management Protoc ol Ta r g e t s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 137 8 NOTE T o r emov e an S MMP target , select the user in the list and click Del et e .[...]

9 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 138 Captive Por t al This chapter describe s the Captiv e P or tal (CP) f eature, which allows you t o block wireless clients from acc essing t he netw ork until us er verification has been established. Y ou can configure CP v erifica tion to allow acce ss f or both gue st and [...]

Captive Por tal Cap tive Portal Global Configur a tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 139 9 Captive Por t al Glob al Configuration Y ou can us e the Global CP Co nfiguration pa ge t o contr ol the adm inistrative state of the CP f e atur e and configure global se t tings that aff ect all captive p ort al insta[...]

Captive Por tal Ins tance Configura tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 140 9 Instanc e C onfigura tion Y ou can creat e up to two Captive P or tal in stances ; each CP instance is a defined set of instance parameters. Instanc es can b e asso ciat ed with one or mor e V APs . Differ ent instances can be c onfi[...]

Captive Por tal Ins tance Configura tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 141 9 - RA D IU S — T h e W A P d e v i c e u s e s a d a t a b a s e o n a re m o t e R A D I U S s e r v e r t o authenticate users. • Redire ct —Specifies that CP should redirect the newly authenticat ed client t o the configured [...]

Captive Por tal Ins tance Configura tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 142 9 • Glob al RA DIUS — This field is available if the V erification Mod e is R ADIUS. By default, the CP instance uses the glob al R ADIUS set tings that you define fo r t h e W A P d e v i c e ( s e e RAD I U S Se rve r ). However [...]

Captive Por tal Inst an ce As s oc iati on Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 143 9 Instanc e A s s o ciation Once you creat e an instance, you can use the Instance A ss ociation page to asso ciat e a CP instance t o a V AP . The ass ociat ed CP instance set tings applies t o users who attempt t o authenticat e on[...]

Captive Por tal W eb Portal Cu s tomiz a tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 144 9 Y ou can as sociate multiple locale s with an instance. When a user at tempts t o acc ess a par ticula r V AP that is as sociated with a CP instanc e, the locale s that are as sociated with that instanc e show as li nks on the a[...]

Captive Por tal W eb Portal Cu s tomiz a tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 145 9 • Ac count Lab el — The te xt that instructs the user to ent er a user name. The range is fr om 1 to 32 charact ers. • Us er L abe l — T h e l a b e l fo r th e u s er n a me te x t b ox . T h e r a ng e i s f ro m 1 to [...]

Captive Por tal W eb Portal Cu s tomiz a tion Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 146 9 • Work In Pr ogre ss T ex t — The t ext that shows during authentication. The range is fr om 1 t o 128 charact ers. The default is Connecting, please b e patient .... • Den ied T ext — The te xt that shows when a user fa[...]

Captive Por tal Lo ca l G rou p s Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 147 9 T o upload binar y graphic files to the W AP device : STEP 1 On the W eb P or tal Cust omization page, click Upload/Delete Custom Image next to th e Backgrou nd Image Name , Lo go Image Name , or Acc ount Image fields. The W eb P or tal Cus[...]

Captive Por tal Lo ca l U s e rs Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 148 9 STEP 1 Select Captive Po r tal > Lo cal Groups in the na vigation pane. STEP 2 Enter a Group Name and click Sa v e . The changes are sa ved t o the Star tup Configuration. NOTE T o delet e a gr oup, select it in the Captive Por tal G r ou[...]

Captive Por tal Authentica te d Clien ts Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 149 9 minut es . The default value is 60 . The timeout value configured her e has pr ec edence over the value configured f or the captive por tal instance, unles s the user value is s et t o 0. When set t o 0, the timeout value configured [...]

Captive Por tal F ailed Aut hen tication Clients Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 150 9 - Lo cal — The W AP devic e uses a lo cal database to authenticat ed us ers. - RA D IU S — The W AP device use s a database on a r emote RADIUS ser ver t o authen ticat e users . • VA P I D — The V AP that the user is[...]

Captive Por tal F ailed Aut hen tication Clients Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 151 9 • Us er Name — The Captive P ortal us er name of the client . • Ve r i f i c at i o n — The metho d the client attempt ed to use to authenticate on the Captiv e Portal, which can be one of thes e values: - Guest — T[...]

10 Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 152 Single Point Setup This chapter describe s how t o configure Single P oint Setup over multiple W AP devices . It includes thes e t opics: • Single Point Setup O ver view • Acc ess Poin ts • Sessi o n s • Channel Man agement • Wireles s Neighborho od Single Point [...]

Single Point Setup Single P oint S e tup Over view Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 153 10 Single Point Setup allows the management of more than one clust er in the same subnet or network ; howeve r , they are managed as single independent entities . The table below shows Single Point Setup wireless s er vice li[...]

Single Point Setup Single P oint S e tup Over view Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 154 10 Single Point Setup Single- and Dual-Radio APs A Single Point Setup can contain a mix tur e of dual- radio and single-radio APs. When the configuration of a single-radio device in the cluster changes , the device pr opagate[...]

Single Point Setup Single P oint S e tup Over view Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 155 10 sec ondarily , the most rec ent change, will be selected to pr opagate its configuration to the clust er . ( That is , if W AP 1 has mor e changes , but W AP2 has the most recent change, W A P 1 is selected. If they ha ve [...]

Single Point Setup Single P oint S e tup Over view Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 156 10 Management Acces s Control SNMP General and S NMP v3 N etw o rk s WP A- P SK Co mpl e xity Ti m e S e t t i n g s Common C onfiguration Set tings and Parameters that ar e Propagated in Single Point Setup Radio Configuratio[...]

Single Point Setup Acc ess Points Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 157 10 Access P oi n ts The Acce ss Points page allows you t o enable or disable Single Point Setup on a W AP device, view the clust er members , and configure the location and cluster name f or a member . Y ou can also click the IP address of a [...]

Single Point Setup Acc ess Points Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 158 10 The cluster name is not sent t o othe r W AP device s. Y ou mu st configure the same name on each devic e that is a member . The cluster name must be unique f o r each Single P oint Setup you configur e on the network . The def ault is cis[...]

Single Point Setup Acc ess Points Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 159 10 Note that the Single Point Setup status and the number of W AP devices are shown graphically on the right side of the page. T o add a new acce ss point that is currently in standalone mo de int o a Single P oint Setup cluster : STEP 1 Go t[...]

Single Point Setup Se ssions Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 160 10 Y ou can also link to the web-bas ed configuration utilit y of a specific W AP device by entering the IP addr es s f or that acce ss poi nt as a URL dir ectly into a web browser address b ar in the f ollowing f orm: http :// IP Ad dr essOfA cce[...]

Single Point Setup Channel Managemen t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 161 10 A MAC addr es s is a har dwar e address that uniquely identifies each node of a network . • Idle — The amount of time this WL AN client has r emained inactive. A WLAN client i s considered t o be inactive when it is not receiving [...]

Single Point Setup Channel Managemen t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 162 10 The aut omatic channel as signment f e atur e is disabled by default . The stat e of channel management (enabled or disabled ) is pr opagat ed to the other devices in the Single Point Setup cluster . At a specified interval, the chann[...]

Single Point Setup Channel Managemen t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 163 10 No channel usage maps or chann el r eassi gnments are made. Only manual updates aff ect the channel assignment . When channel management is enabled, the page shows the Current Channel As signations table and the Proposed Channel A ssi[...]

Single Point Setup Channel Managemen t Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 164 10 F or each W AP device in the Single Point Setup, the Propose d Channel As signments table shows the location, IP Ad dress , and Wir eles s Radio, as in the Curr ent Channel A ssignations table. It also shows the Pro po sed Channel, wh[...]

Single Point Setup W ir eless Neighb orhoo d Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 165 10 Wireles s Neighb orho o d The Wir eless Neighb orhood page shows up to 20 devices per radio within range of each wire les s radio in the cluster . (F or e xample, if a W AP device has two wireless radio s, 40 device s would be d[...]

Single Point Setup W ir eless Neighb orhoo d Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 166 10 If ther e is only one W AP device in the cluster , only a single IP address column shows , indicating that the W AP devic e is grouped with itse lf . Y ou can click on an IP addr es s to v iew more details on a pa r ticular W AP[...]

Single Point Setup W ir eless Neighb orhoo d Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 167 10 • MA C Addres s — The MAC addr es s of the neighboring acce ss point . • Channel — The channel on which the acce ss point is currently broadcasting. • Rate — The rat e in megabits per second at which this ac ces s po[...]

A Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 168 D e authentic a tion Me s s age Re as on C o de s When a client deauthenticates fr om the W AP device, a mes sage is sent to the syst em log. The mes sage includes a reason code that may be helpful in determining wh y a client was deauthenticated. Y ou can view log mes sage[...]

De authentic a tion Mes sa ge Reas on Co de s Deauthentica tion R eason Co de T able Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 169 A 9 ST A requesting (re)as so ciation is not authenticated with re sp o nd in g ST A 10 Disas soc iat ed be cause the inf ormation in the Power Capability element is unacceptable 11 Disas soc[...]

B Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 170 Wher e to Go F r om Her e Cisco provides a wide range of r esources to help you and y our customer obtain the full benefits of the Cisc o W AP551 and W AP561 Ac ces s Point. Suppor t Cisco Small Busine ss Suppor t Communit y w w w .cis co.com/ go/ smallbizsuppor t Cisco Sma[...]

Where to Go F rom Here Cisco Small Busines s W AP551 and W AP561 W ir eles s-N Acces s Point 171 B Ci sco S ma ll B u si n ess Cisc o P ar tner Central for Small Busine ss (Par tner Lo g in R e q ui re d ) w w w .cis co.com/web/par tners/ sell/ smb Cisco Small Business Home www .c is co .c o m/ s m b[...]

© 2013 Cisco Syst ems, Inc. All rights reser ved. 78-20594-01 Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: ww w.cisco.c om/go/trademarks . Third-party trademarks mentioned are the property of their resp ective own[...]