Summary of the content on the page No. 1
Cisco Aironet 1200 Series Access Point
Software Configuration Guide
Software Release 12.03T
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Text Part Number: OL-2159-05
Summary of the content on the page No. 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE IN
Summary of the content on the page No. 3
CONTENTS Preface xiii Audience and Scope xiii Organization xiii Conventions xiv Related Publications xv Obtaining Documentation xv Cisco.com xv Documentation CD-ROM xvi Ordering Documentation xvi Documentation Feedback xvi Obtaining Technical Assistance xvii Cisco TAC Website xvii Opening a TAC Case xvii TAC Case Priority Definitions xvii Obtaining Additional Publications and Information xviii CHAPTER 1 Overview 1-1 Key Features 1-2 Management Options 1-3 Roaming Client Devices 1-3 Quality of Se
Summary of the content on the page No. 4
Contents CHAPTER 2 Using the Management Interfaces 2-1 Using the Web-Browser Interface 2-2 Using the Web-Browser Interface for the First Time 2-2 Using the Management Pages in the Web-Browser Interface 2-2 Navigating Using the Map Windows 2-3 Using the Command-Line Interface 2-4 Preparing to Use a Terminal Emulator 2-4 Connecting the Serial Cable 2-5 Setting Up the Terminal Emulator 2-5 Changing Settings with the CLI 2-5 Selecting Pages and Settings 2-6 Applying Changes to the Configuration 2-7
Summary of the content on the page No. 5
Contents Settings on the AP Radio Advanced Page 3-17 Ethernet Configuration 3-23 Entering Identity Information 3-23 Settings on the Ethernet Identification Page 3-24 Entering Ethernet Hardware Information 3-24 Settings on the Ethernet Hardware Page 3-25 Entering Advanced Configuration Information 3-27 Settings on the Ethernet Advanced Page 3-27 CHAPTER 4 Configuring VLANs 4-1 Entering VLAN Information 4-2 Settings on the VLAN Setup page 4-2 VLAN Summary Status Link 4-3 VLAN (802.1Q) Tagging 4-3
Summary of the content on the page No. 6
Contents Guidelines for Wireless VLAN Deployment 4-21 CHAPTER 5 Configuring Filters and QoS 5-1 Filter Setup 5-2 Protocol Filtering 5-2 Creating a Protocol Filter 5-3 Enabling a Protocol Filter 5-5 MAC Address Filtering 5-6 Creating a MAC Address Filter 5-7 QoS Configuration 5-10 Entering Information on the AP Radio Quality of Service Setup Page 5-10 Settings on the Quality of Service Setup Page 5-11 Generate QBSS Element 5-11 Use Symbol Extensions 5-11 Send IGMP General Query 5-12 Traffic Categ
Summary of the content on the page No. 7
Contents Registration 6-10 Tunneling 6-10 Proxy Mobile IP Security 6-11 The Proxy Mobile IP Setup Page 6-11 General 6-12 Settings on the Proxy Mobile IP General Page 6-13 Authentication Server 6-13 Settings on the Authenticator Configuration Page 6-14 Local SA Bindings 6-15 Settings on the Local SA Bindings Page 6-15 Statistics 6-16 Settings on the Proxy Mobile IP Statistics Page 6-16 View Subnet Map Table 6-18 Settings on the Subnet Map Table Page 6-18 Configuring Proxy Mobile IP 6-18 Configuri
Summary of the content on the page No. 8
Contents Settings on the Association Table Advanced Page 7-17 Event Notification Setup 7-19 Event Display Setup Page 7-19 Settings on the Event Display Setup Page 7-19 Event Handling Setup Page 7-21 Settings on the Event Handling Setup Page 7-23 Event Notifications Setup Page 7-24 Settings on the Event Notifications Setup Page 7-25 Should Notify-Disposition Events generate SNMP Traps? 7-25 SNMP Trap Destination 7-25 SNMP Trap Community 7-25 Should Notify-Disposition Events generate Syslog Messag
Summary of the content on the page No. 9
Contents Authenticating Client Devices Using MAC Addresses or EAP 8-25 Enabling MAC-Based Authentication in Cisco Secure ACS 8-26 Summary of Settings for Authentication Types 8-27 RADIUS Attributes Sent by the Access Point 8-29 Setting Up Backup Authentication Servers 8-31 Setting Up Administrator Authorization 8-32 Creating a List of Authorized Management System Users 8-33 Setting up Centralized Administrator Authentication 8-35 System Flow Notes 8-37 Authorization Parameters 8-38 CHAPTER 9 Net
Summary of the content on the page No. 10
Contents Retrieving Firmware and Web Page Files 10-7 Distributing Firmware 10-8 Distributing a Configuration 10-9 Limiting Distributions 10-10 Downloading, Uploading, and Resetting the Configuration 10-10 Downloading the Current Configuration 10-11 Uploading a Configuration 10-12 Uploading from a Local Drive 10-12 Uploading from a File Server 10-12 Resetting the Configuration 10-13 Restarting the Access Point 10-14 CHAPTER 11 Management System Setup 11-1 SNMP Setup 11-2 Settings on the SNMP Setu
Summary of the content on the page No. 11
Contents Log Headings 13-14 Saving the Log 13-14 Event Log Summary Page 13-14 Using Command-Line Diagnostics 13-15 Entering Diagnostic Commands 13-16 Diagnostic Command Results 13-17 :eap_diag1_on 13-17 :eap_diag2_on 13-18 :vxdiag_arpshow 13-18 :vxdiag_checkstack 13-20 :vxdiag_hostshow 13-21 :vxdiag_i 13-22 :vxdiag_ipstatshow 13-23 :vxdiag_memshow 13-24 :vxdiag_muxshow 13-25 :vxdiag_routeshow 13-26 :vxdiag_tcpstatshow 13-27 :vxdiag_udpstatshow 13-28 Tracing Packets 13-28 Reserving Access Point M
Summary of the content on the page No. 12
Contents IEEE 802.11b A-4 APPENDIX B Protocol Filter Lists B-1 APPENDIX C Event Log Messages C-1 Message Formats C-2 Default Format C-2 Cisco Emblem Format C-2 Message Descriptions C-4 Statuses and Reasons C-28 Cisco Aironet 1200 Series Access Point Software Configuration Guide xii OL-2159-01
Summary of the content on the page No. 13
Preface The Cisco Aironet 1200 Series Access Point Software Configuration Guide describes how to configure Cisco Aironet 1200 Series Access Points using the web-based management system. This manual also briefly describes how to use the console-based management system. Audience and Scope This guide is for the network manager responsible for configuring a wireless network. Before using the material in this guide, you should be familiar with some of the concepts and terminology of Ethernet and
Summary of the content on the page No. 14
Preface Conventions Chapter 9, “Network Management,” describes how to browse to other devices on your network. The chapter also describes how to use Cisco Discovery Protocol (CDP), assign a specific network port to a MAC address, and how to enable wireless network accounting. Chapter 10, “Managing Firmware and Configurations,” describes how to update firmware on your access point and how to distribute firmware and configurations to other access points. Chapter 11, “Management System Setup,” e
Summary of the content on the page No. 15
Preface Related Publications Related Publications The following documents provide more information about access points and related products: Quick Start Guide: Cisco Aironet 1200 Series Access Points describes how to attach cables, power on, and assign an IP address and default gateway for the access point. Cisco Aironet 1200 Series Access Point Hardware Installation Guide describes the access point’s hardware features, its physical and performance characteristics, and how to mount the acc
Summary of the content on the page No. 16
Preface Obtaining Documentation Documentation CD-ROM Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription. Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through
Summary of the content on the page No. 17
Preface Obtaining Technical Assistance Obtaining Technical Assistance For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance. Cisco TAC Website The Cisco TAC website (http://www.cisco.com/tac) provides online documents and tools f
Summary of the content on the page No. 18
Preface Obtaining Additional Publications and Information Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations. Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. The Cisco Product Catalog describes the networking products offered by Cisco Systems, a
Summary of the content on the page No. 19
CH A P TER 1 Overview Cisco Aironet access points are wireless LAN transceivers that serve as the center point of a stand-alone wireless network or as the connection point between wireless and wired networks. In large installations, wireless users within radio range of an access point can roam throughout a facility while maintaining seamless, uninterrupted access to the network. Your access point can contain two radios: a 2.4-GHz radio in an internal mini-PCI slot and a 5-GHz radio module in
Summary of the content on the page No. 20
Chapter 1 Overview Key Features Key Features This section describes the key features of the access point firmware. The following are the key features of this firmware version: Multiple IEEE 802.11 service set identifiers (SSIDs) allow you to create different levels of network access and to access virtual LANs (VLANs).You can configure up to 16 separate SSIDs to support up to 16 VLANs for each access point radio. Each VLAN can have a different wireless security configuration so that