Summary of the content on the page No. 1
Cisco IOS Software Configuration Guide
for Cisco Aironet Access Points
Cisco IOS Releases 15.2(2)JA, 12.4(25d)JA, and 12.3(8)JEE
August 2012
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-21881-03
Summary of the content on the page No. 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE
Summary of the content on the page No. 3
CONTENTS Audience i-xix Purpose i-xx Organization i-xx Conventions i-xxi Related Publications i-xxiv Obtaining Documentation, Obtaining Support, and Security Guidelines i-xxiv CHAPTER 1 Overview 1-1 Features 1-2 Features Introduced in This Release 1-2 Management Options 1-3 Roaming Client Devices 1-4 Network Configuration Examples 1-4 Root Access Point 1-4 Repeater Access Point 1-5 Bridges 1-5 Workgroup Bridge 1-6 Central Unit in an All-Wireless Network 1-7 CHAPTER 2 Using the Web-Browser Inte
Summary of the content on the page No. 4
Contents Getting Help 3-3 Abbreviating Commands 3-3 Using no and default Forms of Commands 3-4 Understanding CLI Messages 3-4 Using Command History 3-4 Changing the Command History Buffer Size 3-5 Recalling Commands 3-5 Disabling the Command History Feature 3-5 Using Editing Features 3-6 Enabling and Disabling Editing Features 3-6 Editing Commands Through Keystrokes 3-6 Editing Command Lines that Wrap 3-7 Searching and Filtering Output of show and more Commands 3-8 Accessing the CLI 3-9 Openin
Summary of the content on the page No. 5
Contents Using the Express Security Page 4-20 CLI Configuration Examples 4-21 Configuring System Power Settings for 1040, 1130, 1140, 1240, 1250, and 1260 Series Access Points 4-26 Using the AC Power Adapter 4-26 Using a Switch Capable of IEEE 802.3af Power Negotiation 4-26 Using a Switch That Does Not Support IEEE 802.3af Power Negotiation 4-27 Using a Power Injector 4-27 dot11 extension power native Command 4-27 Support for 802.11n Performance on 1250 Series Access Points with Standard 802.
Summary of the content on the page No. 6
Contents Default TACACS+ Configuration 5-15 Configuring TACACS+ Login Authentication 5-15 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 5-17 Displaying the TACACS+ Configuration 5-17 Configuring Ethernet Speed and Duplex Settings 5-18 Configuring the Access Point for Wireless Network Management 5-18 Configuring the Access Point for Local Authentication and Authorization 5-19 Configuring the Authentication Cache and Profile 5-20 Configuring the Access Point t
Summary of the content on the page No. 7
Contents Default Banner Configuration 5-35 Configuring a Message-of-the-Day Login Banner 5-35 Configuring a Login Banner 5-37 Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode 5-37 Migrating to Japan W52 Domain 5-37 Verifying the Migration 5-39 Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging 5-39 CLI Command 5-40 CHAPTER 6 Configuring Radio Settings 6-1 Enabling the Radio Interface 6-2 Configuring the Role in Radio Network 6-2 Universal Workgroup
Summary of the content on the page No. 8
Contents Configuring Transmit and Receive Antennas 6-26 Enabling and Disabling Gratuitous Probe Response 6-27 Disabling and Enabling Aironet Extensions 6-28 Configuring the Ethernet Encapsulation Transformation Method 6-29 Enabling and Disabling Reliable Multicast to Workgroup Bridges 6-29 Enabling and Disabling Public Secure Packet Forwarding 6-30 Configuring Protected Ports 6-31 Configuring the Beacon Period and the DTIM 6-32 Configure RTS Threshold and Retries 6-32 Configuring the Maximum D
Summary of the content on the page No. 9
Contents CLI Configuration Example 7-10 Displaying Configured BSSIDs 7-10 Assigning IP Redirection for an SSID 7-11 Guidelines for Using IP Redirection 7-12 Configuring IP Redirection 7-12 Including an SSID in an SSIDL IE 7-13 NAC Support for MBSSID 7-13 Configuring NAC for MBSSID 7-16 CHAPTER 8 Configuring Spanning Tree Protocol 8-1 Understanding Spanning Tree Protocol 8-2 STP Overview 8-2 1300 and 350 Series Bridge Interoperability 8-3 Access Point/Bridge Protocol Data Units 8-3 Election of
Summary of the content on the page No. 10
Contents Configuring Other Access Points to Use the Local Authenticator 9-6 Configuring EAP-FAST Settings 9-7 Configuring PAC Settings 9-7 Configuring an Authority ID 9-8 Configuring Server Keys 9-8 Possible PAC Failures Caused by Access Point Clock 9-8 Limiting the Local Authenticator to One Authentication Type 9-9 Unblocking Locked Usernames 9-9 Viewing Local Authenticator Statistics 9-9 Using Debug Messages 9-10 CHAPTER 10 Configuring Cipher Suites and WEP 10-1 Understanding Cipher Suites a
Summary of the content on the page No. 11
Contents Applying an EAP Profile to the Fast Ethernet Interface 11-18 Applying an EAP Profile to an Uplink SSID 11-19 Matching Access Point and Client Device Authentication Types 11-19 CHAPTER 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services 12-1 Understanding WDS 12-2 Role of the WDS Device 12-2 Role of Access Points Using the WDS Device 12-3 Understanding Fast Secure Roaming 12-3 Understanding Radio Management 12-5 Understanding Layer 3 Mo
Summary of the content on the page No. 12
Contents Configuring Access Points to Participate in WIDS 12-29 Configuring the Access Point for Scanner Mode 12-29 Configuring the Access Point for Monitor Mode 12-29 Displaying Monitor Mode Statistics 12-30 Configuring Monitor Mode Limits 12-31 Configuring an Authentication Failure Limit 12-31 Configuring WLSM Failover 12-31 Resilient Tunnel Recovery 12-31 Active/Standby WLSM Failover 12-32 CHAPTER 13 Configuring RADIUS and TACACS+ Servers 13-1 Configuring and Enabling RADIUS 13-1 Understand
Summary of the content on the page No. 13
Contents CHAPTER 14 Configuring VLANs 14-1 Understanding VLANs 14-2 Related Documents 14-3 Incorporating Wireless Devices into VLANs 14-4 Configuring VLANs 14-4 Configuring a VLAN 14-5 Assigning Names to VLANs 14-7 Guidelines for Using VLAN Names 14-7 Creating a VLAN Name 14-8 Using a RADIUS Server to Assign Users to VLANs 14-8 Using a RADIUS Server for Dynamic Mobility Group Assignment 14-9 Viewing VLANs Configured on the Access Point 14-9 VLAN Configuration Example 14-10 CHAPTER 15 Configuri
Summary of the content on the page No. 14
Contents Configuring Filters Using the CLI 16-2 Configuring Filters Using the Web-Browser Interface 16-3 Configuring and Enabling MAC Address Filters 16-3 Creating a MAC Address Filter 16-4 Using MAC Address ACLs to Block or Allow Client Association to the Access Point 16-6 Creating a Time-Based ACL 16-8 ACL Logging 16-9 CLI Configuration Example 16-9 Configuring and Enabling IP Filters 16-9 Creating an IP Filter 16-11 Configuring and Enabling Ethertype Filters 16-12 Creating an Ethertype Filt
Summary of the content on the page No. 15
Contents SNMP Examples 18-10 Displaying SNMP Status 18-12 CHAPTER 19 Configuring Repeater and Standby Access Points and Workgroup Bridge Mode 19-1 Understanding Repeater Access Points 19-2 Configuring a Repeater Access Point 19-3 Default Configuration 19-4 Guidelines for Repeaters 19-4 Setting Up a Repeater 19-5 Aligning Antennas 19-6 Verifying Repeater Operation 19-6 Setting Up a Repeater As a LEAP Client 19-7 Setting Up a Repeater As a WPA Client 19-8 Understanding Hot Standby 19-9 Configuri
Summary of the content on the page No. 16
Contents Deleting Files 20-5 Creating, Displaying, and Extracting tar Files 20-5 Creating a tar File 20-5 Displaying the Contents of a tar File 20-6 Extracting a tar File 20-7 Displaying the Contents of a File 20-7 Working with Configuration Files 20-7 Guidelines for Creating and Using Configuration Files 20-8 Configuration File Types and Location 20-9 Creating a Configuration File by Using a Text Editor 20-9 Copying Configuration Files by Using TFTP 20-9 Preparing to Download or Upload a Conf
Summary of the content on the page No. 17
Contents Browser HTTP Interface 20-32 Browser TFTP Interface 20-33 CHAPTER 21 Configuring System Message Logging 21-1 Understanding System Message Logging 21-2 Configuring System Message Logging 21-2 System Log Message Format 21-2 Default System Message Logging Configuration 21-3 Disabling and Enabling Message Logging 21-4 Setting the Message Display Destination Device 21-5 Enabling and Disabling Timestamps on Log Messages 21-6 Enabling and Disabling Sequence Numbers in Log Messages 21-6 Defin
Summary of the content on the page No. 18
Contents Using the CLI 22-25 Reloading the Access Point Image 22-26 Using the MODE button 22-27 Using the Web Browser Interface 22-27 Browser HTTP Interface 22-28 Browser TFTP Interface 22-28 Using the CLI 22-29 Obtaining the Access Point Image File 22-30 Obtaining TFTP Server Software 22-31 Image Recovery on the 1520 Access Point 22-31 APPENDIX A Protocol Filters A-1 APPENDIX B Supported MIBs B-1 MIB List B-1 Using FTP to Access the MIB Files B-2 APPENDIX C Error and Event Messages C-1 Conven
Summary of the content on the page No. 19
Preface Revised: August 30, 2012 OL-21881-03 Audience This guide is for the networking professional who installs and manages Cisco Aironet Access Points. To use this guide, you should have experience working with the Cisco IOS software and be familiar with the concepts and terminology of wireless local area networks. The guide covers Cisco IOS Releases 15.2(2)JA, 12.4(25d)JA, and 12.3(8)JEE. Cisco IOS Releases 15.2(2)JA and 12.4(25d)JA support the following autonomous 32 Mb platforms: • 1040 s
Summary of the content on the page No. 20
Preface Purpose Purpose This guide provides the information you need to install and configure your access point. This guide provides procedures for using the Cisco IOS software commands that have been created or changed for use with the access point. It does not provide detailed information about these commands. For detailed information about these commands, refer to the Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges for this release. For information about the standa
