Cisco CiscoWorks 1105 User manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
User Guide for the CiscoWorks 1105
Wireless LAN Solution Engine
Customer Order Number: DOC-7814947=
Text Part Number: 78-14947-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT
NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT
ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR
THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION
PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO
LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as
part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
Copyright ©2002, Cisco Systems, Inc.
All rights reserved.
C
CIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of
C
isco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST,
B
PX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press,
C
isco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch,
F
ast Step, GigaStack, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, MGX, MICA, the Networkers
l
ogo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar, ScriptShare, SlideCast, SMARTnet,
S
trataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are registered trademarks of
C
isco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
A
ll other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a
p
artnership relationship between Cisco and any other company. (0304R)

iii
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01
CONTENTS
Preface xiii
Audience xiii
Conventions xiii
Related Documentation xiv
Obtaining Documentation xv
World Wide Web xv
Ordering Documentation xvi
Documentation Feedback xvi
Obtaining Technical Assistance xvi
Cisco.com xvii
Technical Assistance Center xvii
CHAPTER 1Getting Started 1-1
Overview of the Wireless LAN Solution Engine 1-1
Understanding the WLSE User Interface 1-2
The WLSE Dashboard 1-2
Device Name and IP Address Display 1-5
TimeDisplay 1-5
Logging In and Out 1-6
Getting Started with Device Management 1-7
CHAPTER 2Fault Monitoring 2-1
Displaying Faults 2-1
Viewing Fault Details 2-5

Contents
iv
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
Managing Profiles 2-7
Creating a Profile 2-8
Copying a Profile 2-8
Renaming a Profile 2-9
Editing a Profile 2-9
Deleting a Profile 2-10
Assigning a Profile to a Device 2-10
Viewing Devices 2-11
Profile Choices 2-12
Notification Settings 2-20
Setting Trap Notification 2-21
Setting Syslog Notification 2-22
Emailing Faults 2-23
CHAPTER 3Configuring Devices 3-1
Using the Templates 3-1
Template Choices 3-2
Creating a Template 3-132
Copying a Template 3-133
Editing a Template 3-134
Deleting a Template 3-134
Importing a Template 3-135
Exporting a Template 3-137
Managing Configuration Jobs 3-137
Job Choices 3-138
Creating a Configuration Job 3-144
Viewing Configuration Job Status 3-144
Automating Configurations 3-151
Assigning a Startup Configuration 3-151
Creating a Startup Configuration Template 3-153

v
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01
Contents
Assigning an Auto-Managed Configuration 3-154
CHAPTER 4Updating Device Firmware 4-1
Managing Firmware Images 4-1
Viewing Images onthe WLSE 4-2
Editing Image Details on the WLSE 4-3
Deleting Images from the WLSE 4-4
Importing Images 4-4
Using a Remote TFTP Server for Image Upload 4-9
Managing Firmware Jobs 4-9
Job Choices 4-10
Creating a Firmware Job 4-18
Using the Job Functions 4-18
CHAPTER 5Using Reports 5-1
Using the Device Center 5-1
Viewing the Fault Summary Report 5-3
Viewing Device History 5-4
Viewing Config History 5-4
Viewing Firmware History 5-5
Displaying Wireless Client Reports 5-6
Displaying a Client Detail Report 5-6
Displaying a Client Statistics Report 5-8
Displaying a Client Historical Association Report 5-9
Displaying Current Reports 5-11
Displaying a Group Report 5-12
Displaying a Group Security Report 5-14
Displaying a Group SSID Report 5-16
Displaying a Group VLAN Report 5-18

Contents
vi
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
Displaying a Per VLAN Client Report 5-20
Displaying a Group Policy Report 5-21
Displaying an AP Summary Report 5-24
Displaying a Detailed Report 5-26
Displaying a Current Client Association Report 5-29
Displaying an EAP Authentication Report 5-30
Displaying an AP Ethertype Protocol Filters Report 5-32
Displaying an AP IP Protocol Filters Report 5-33
Displaying an AP IP Port Filters Report 5-35
Displaying an AP Policy Report 5-36
Displaying an AP QBSS QoS Report 5-38
Displaying an AP SSID Report 5-40
Displaying an AP VLAN Report 5-42
Displaying a Per VLAN Client Report 5-43
Displaying a Switch Summary Report 5-45
Displaying an AP and Bridge Connected to Switch Report 5-46
Displaying a Router Summary Report 5-47
Displaying an AP and Bridge Connected to Router Report 5-48
Displaying a Server Summary Report 5-49
Displaying Trends 5-50
Displaying a Group Performance Report: RF Utilization 5-51
Displaying a Group Performance Report: Ethernet Utilization 5-53
Displaying a Top N Number of Associations Report 5-54
Displaying a Top N Percentage Errors 5-55
Displaying an AP and Bridge RF Transmission Statistics Report 5-56
Displaying an AP and Bridge Ethernet Transmission Statistics Report 5-58
Displaying an AP and Bridge Performance Graph 5-60
Displaying an AP and Bridge Performance: Tabular 5-61
Displaying Top N Busiest Clients 5-62
Displaying Top N Client Error Rate 5-64

vii
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01
Contents
Displaying a Server Response Time Graph 5-65
Exporting a Report 5-66
Emailing a Report 5-66
Scheduling Email Jobs 5-68
Viewing Email Job Details 5-69
CHAPTER 6Performing Administrative Tasks 6-1
Using Discovery and Managing Devices 6-2
Managing Devices 6-2
Specifying Device Credentials 6-6
Managing Device Discovery 6-10
Running Inventories 6-24
Viewing Inventory and Discovery Task History 6-27
Importing Devices 6-28
Exporting Devices 6-31
Adding, Modifying and Deleting AAA Servers 6-33
Managing Groups 6-37
Overview: Groups 6-37
Creating, Editing,and Deleting Groups 6-39
Managing the Appliance 6-44
Viewing WLSE Status 6-45
Managing the Software 6-47
Overview: Security 6-55
Managing Security 6-56
Backing Up and Restoring Data 6-61
Using Diagnostics 6-64
Setting Up the Splash Screen Message 6-69
Setting the Current Time and Date on the WLSE 6-69
Specifying NTP Time Servers 6-70

Contents
viii
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
Specifying Name Servers 6-71
Specifying an SMTP Mail Server 6-71
Using Connectivity Tools 6-72
Managing System Parameters 6-73
Administering Users 6-75
Managing Roles 6-75
Managing Users 6-77
Modifying Your Profile 6-80
Linking to a CiscoWorks2000 Server 6-81
CHAPTER 7Frequently Asked Questions 7-1
CHAPTER 8Troubleshooting 8-1
APPENDIX ANaming Guidelines A-1
APPENDIX BCommand Reference B-1
Using the CLI B-2
CLI Conventions B-2
Command Privileges B-2
Checking Command Syntax B-2
Command History Feature B-3
Help for CLI Commands B-3
Command Summary B-4
Command Description Conventions B-9
Privilege Level 0 Commands B-10
exit B-10
ping B-10

ix
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01
Contents
show clock B-11
show domain-name B-12
show interfaces B-13
show process B-13
show version B-14
traceroute B-15
Privilege Level 15 Commands B-17
auth B-17
backup B-18
backupconfig B-19
cdp B-20
clock B-21
df B-22
erase config B-23
firewall B-24
gethostbyname B-25
hostname B-25
import B-26
install configure B-27
install list B-28
installupdate B-29
interface B-30
ip domain-name B-31
ip name-server B-32
listbackup B-33
mail B-34
mailcntrl clear B-35
mailcntrl list B-35
mailroute B-36
nslookup B-36

Contents
x
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
ntp server B-37
reload B-39
reinitdb B-40
repository B-40
repository add B-41
repository delete B-42
repository list B-43
repository server B-44
restore B-45
route B-46
services B-46
show anilog B-48
show auth-cli B-49
show auth-http B-49
show backupconfig B-50
show bootlog B-51
show cdp neighbor B-52
show cdp run B-52
show collectorlog B-53
show config B-54
show daemonslog B-55
show dmgtdlog B-56
show webaccesslog B-57
show weberrorlog B-58
show websslaccesslog B-59
show import B-59
show install logs B-60
show ipchains B-60
show hosts B-61
show maillog B-62

xi
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01
Contents
show proc B-62
show repository B-63
show route B-64
show securitylog B-64
show snmp-server B-66
show ssh-version B-66
show syslog B-67
show tech B-68
show telnetenable B-68
show tomcatlog B-69
shutdown B-70
snmp-server B-71
ssh B-71
ssh-version B-72
telnet B-72
telnetenable B-73
username B-74
Maintenance Image Commands B-75
erase config B-75
fsck B-76
reload B-76
G LOSSARY
I NDEX

Contents
xii
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01

xiii
User Guide for the CiscoWorks 1105 Wireless LAN SolutionEngine
78-14947-01
Preface
This manual describes the Wireless LAN Solution Engine (WLSE) and provides
instructions for using it.
Audience
This document is for system administrators responsible for managing a wireless
network who are familiar with some of the concepts and terminology of Ethernet
and wireless local area networking.
Conventions
This document uses the following conventions:
Item Convention
Commands and keywords boldface font
Variables for which you supply values italic font
Displayed session and system information screen font
Information you enter boldface screen font
Variables you enter
italic screen font

Preface
Related Documentation
xiv
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
Note Means reader take note. Notes contain helpful suggestions or references to
material not covered in the publication.
Caution Means reader be careful. In this situation, you might do something that could
result in equipment damage or loss of data.
Related Documentation
Note Although every effort has been made to validate the accuracy of the information
in the printed and electronic documentation, you should also review the Wireless
LAN Solution Engine documentation on Cisco.com for any updates.
The following additional documentation is available:
Paper Documentation
•Installation and Configuration Guide for the CiscoWorks 1105 Wireless LAN
Solution Engine
•Quick Start Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
•Regulatory Compliance and Safety Information for the CiscoWorks 1105
Wireless LAN Solution Engine
Menu items and button names boldface font
Selecting a menu item Option>Network Preferences
Item Convention

xv
User Guide for the CiscoWorks 1105 Wireless LAN SolutionEngine
78-14947-01
Preface Obtaining Documentation
Online Documentation
•Online help—Access the online help by clicking on the Help tab.
•Release Notes for the CiscoWorks 1105 Wireless LAN Solution Engine
•Integrating Cisco Applications with CiscoWorks2000 Management
Connection (CMC)
•PDF for:
– Installation and Configuration Guide for the CiscoWorks 1105 Warless
LAN Solution Engine
– Quick Start Guide for the CiscoWorks 1105 Wireless LAN Solution
Engine
– Regulatory Compliance and Safety Information for the CiscoWorks 1105
Wireless LAN Solution Engine
Note Adobe Acrobat Reader 4.0 is required.
Obtaining Documentation
These sections explain how to obtain documentation from Cisco Systems.
World Wide Web
You can access the most current Cisco documentation on the World Wide Web at
this URL:
http://www.cisco.com
Translated documentation is available at this URL:
http://www.cisco.com/public/countries_languages.shtml

Preface
Obtaining Technical Assistance
xvi
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
Ordering Documentation
Cisco documentation is available in these ways:
•Registered Cisco.com users (Cisco direct customers) canorder Cisco product
documentation from the Networking Products MarketPlace:
http://www.cisco.com/cgi-bin/order/order_root.pl
•Registered Cisco.com users can order the Documentation CD-ROM through
the online Subscription Store:
http://www.cisco.com/go/subscription
•Nonregistered Cisco.com users can order documentation through a local
account representative by calling Cisco corporate headquarters (California,
USA) at 408 526-7208 or, elsewhere in North America, by calling
800 553-NETS (6387).
Documentation Feedback
You can e-mail your comments to [e-mail].
You can submit your comments by mail by using the response card behind the
front cover of your document or by writing to the following address:
Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com as a starting point for all technical assistance.
Customers and partners can obtain online documentation, troubleshooting tips,
and sample configurations from online tools by using the Cisco Technical
Assistance Center (TAC) Web Site. Cisco.com registered users have complete
access to the technical support resources on the Cisco TAC Web Site.

xvii
User Guide for the CiscoWorks 1105 Wireless LAN SolutionEngine
78-14947-01
Preface Obtaining Technical Assistance
Cisco.com
Cisco.com is the foundation of a suite of interactive, networked services that
provides immediate, open access to Cisco information, networking solutions,
services, programs, and resources at any time, from anywhere in the world.
Cisco.com is a highly integrated Internet application and a powerful, easy-to-use
tool that provides a broad range of features and services to help you to
•Streamline business processes and improve productivity
•Resolve technical issues with online support
•Download and test software packages
•Order Cisco learning materials and merchandise
•Register for online skill assessment, training, and certification programs
You can self-register on Cisco.com to obtain customized information and service.
To access Cisco.com, go to this URL:
http://www.cisco.com
Technical Assistance Center
The Cisco Technical Assistance Center (TAC) is available to all customers who
need technical assistance with a Cisco product, technology, or solution. Two
levels of support are available: the Cisco TAC Web Site and the Cisco TAC
Escalation Center.
Cisco TAC inquires are categorized according to the urgency of the issue:
•Priority level 4 (P4)—You need information or assistance concerning Cisco
product capabilities, product installation, or basic product configuration.
•Priority level 3 (P3)—Your network performance is degraded. Network
functionality is noticeably impaired, but most business operations continue.

Preface
Obtaining Technical Assistance
xviii
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01
•Priority level 2 (P2)—Your production network is severely degraded,
affecting significant aspects of business operations. No workaround is
available.
•Priority level 1 (P1)—Your production network is down, and a critical impact
to business operations will occur if service is not restored quickly. No
workaround is available.
Which Cisco TAC resource you choose is based on the priority of the problem and
the conditions of service contracts, when applicable.
Cisco TAC Web Site
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving
both cost and time. The site provides around-the-clock access to online tools,
knowledge bases, and software. To access the Cisco TAC Web Site, go to this
URL:
http://www.cisco.com/tac
All customers, partners, and resellers who have a valid Cisco service contract
have complete access to the technical support resources on the Cisco TAC Web
Site. The Cisco TAC Web Site requires a Cisco.com login ID and password. If
you have a valid service contract but do not have a login ID or password, go to
this URL to register:
http://www.cisco.com/register/
If you are a Cisco.com registered user, and you cannot resolve your technical
issues by using the Cisco TAC Web Site, you can open a case online by using the
TAC Case Open tool at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, it is recommended that you open P3 and P4 cases
through the Cisco TAC Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2
issues. These classifications are assigned when severe network degradation
significantly impacts business operations. When you contact the TAC Escalation
Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a
case.

xix
User Guide for the CiscoWorks 1105 Wireless LAN SolutionEngine
78-14947-01
Preface Obtaining Technical Assistance
To obtain a directory of toll-free Cisco TAC telephone numbers for your country,
go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the
level of Cisco support services to which your company is entitled: for example,
SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When
you call the center, please have available your service agreement number and your
product serial number.

Preface
Obtaining Technical Assistance
xx
User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine 78-14947-01