Cisco IOS XE Release 3SE User manual

Lightweight Access Point Configuration Guide, Cisco IOS XE Release
3SE (Catalyst 3650 Switches)
First Published: October 10, 2013
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-28697-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2013 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface ix
Document Conventions ix
Related Documentation xi
Obtaining Documentation and Submitting a Service Request xi
CHAPTER 1 Using the Command-Line Interface 1
Information About Using the Command-Line Interface 1
Command Modes 1
Using the Help System 3
Understanding Abbreviated Commands 4
No and Default Forms of Commands 4
CLI Error Messages 4
Configuration Logging 5
How to Use the CLI to Configure Features 5
Configuring the Command History 5
Changing the Command History Buffer Size 6
Recalling Commands 6
Disabling the Command History Feature 7
Enabling and Disabling Editing Features 7
Editing Commands Through Keystrokes 8
Editing Command Lines That Wrap 9
Searching and Filtering Output of show and more Commands 10
Accessing the CLI Through a Console Connection or Through Telnet 11
CHAPTER 2 Using the Web Graphical User Interface 13
Prerequisites for Using the Web GUI 13
Information About Using The Web GUI 13
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
OL-28697-01 iii

Web GUI Features 13
Connecting the Console Port of the Switch 15
Logging On to the Web GUI 15
Enabling Web and Secure Web Modes 15
Configuring the Switch Web GUI 16
CHAPTER 3 Configuring the Switch for Access Point Discovery 19
Finding Feature Information 19
Prerequisites for Configuring the Switch for Access Point Discovery 19
Restrictions for Configuring the Switch for Access Point Discovery 20
Information About Configuring the Switch for Access Point Discovery 20
Access Point Communication Protocols 20
Viewing Access Point Join Information 21
Troubleshooting the Access Point Join Process 21
How to Configure Access Point Discovery 22
Configuring the Syslog Server for Access Points (CLI) 22
Monitoring Access Point Join Information (CLI) 23
Searching for Access Point Radios (GUI) 24
Monitoring the Interface Details (GUI) 24
Configuration Examples for Configuring the Switch for Access Point Discovery 25
Displaying the MAC Addresses of all Access Points: Example 25
DHCP Option 43 for Lightweight Cisco Aironet Access Points Configuration Example 26
CHAPTER 4 Configuring Data Encryption 27
Finding Feature Information 27
Prerequisites for Configuring Data Encryption 27
Restrictions for Configuring Data Encryption 27
Information About Data Encryption 28
How to Configure Data Encryption 28
Configuring Data Encryption (CLI) 28
Configuring Data Encryption (GUI) 29
Configuration Examples for Configuring Data Encryption 29
Displaying Data Encryption States for all Access Points: Examples 29
CHAPTER 5 Configuring Retransmission Interval and Retry Count 31
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
iv OL-28697-01
Contents

Finding Feature Information 31
Prerequisites for Configuring the Access Point Retransmission Interval and Retry Count 31
Information About Retransmission Interval and Retry Count 31
How to Configure Access Point Retransmission Interval and Retry Count 32
Configuring the Access Point Retransmission Interval and Retry Count (CLI) 32
Configuring the Access Point Retransmission Interval and Retry Count (GUI) 33
Viewing CAPWAP Maximum Transmission Unit Information (CLI) 34
Viewing CAPWAP Maximum Transmission Unit Information (GUI) 34
Configuration Examples for Configuring Access Point Retransmission Interval and Retry
Count 35
Viewing the CAPWAP Retransmission Details: Example 35
Viewing Maximum Transmission Unit Information: Example 35
CHAPTER 6 Configuring Adaptive Wireless Intrusion Prevention System 37
Finding Feature Information 37
Prerequisites for Configuring wIPS 37
How to Configure wIPS on Access Points 38
Configuring wIPS on an Access Point (CLI) 38
Configuring wIPS on an Access Point (GUI) 39
Monitoring wIPS Information 40
Configuration Examples for Configuring wIPS on Access Points 41
Displaying the Monitor Configuration Channel Set: Example 41
Displaying wIPS Information: Examples 41
CHAPTER 7 Configuring Authentication for Access Points 43
Finding Feature Information 43
Prerequisites for Configuring Authentication for Access Points 43
Restrictions for Configuring Authentication for Access Points 44
Information about Configuring Authentication for Access Points 44
How to Configure Authentication for Access Points 44
Configuring Global Credentials for Access Points (CLI) 44
Configuring Global Credentials for Access Points (GUI) 46
Configuring Authentication for Access Points (CLI) 47
Configuring Authentication for Access Points (GUI) 49
Configuring the Switch for Authentication (CLI) 50
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
OL-28697-01 v
Contents

Configuration Examples for Configuring Authentication for Access Points 51
Displaying the Authentication Settings for Access Points: Examples 51
CHAPTER 8 Converting Autonomous Access Points to Lightweight Mode 53
Finding Feature Information 53
Prerequisites for Converting Autonomous Access Points to Lightweight Mode 53
Information About Autonomous Access Points Converted to Lightweight Mode 54
Reverting from Lightweight Mode to Autonomous Mode 54
Using DHCP Option 43 and DHCP Option 60 54
How Converted Access Points Send Crash Information to the Switch 55
Uploading Memory Core Dumps from Converted Access Points 55
Displaying MAC Addresses for Converted Access Points 55
Configuring a Static IP Address for a Lightweight Access Point 55
How to Convert a Lightweight Access Point Back to an Autonomous Access Point 56
Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 56
Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the
Mode Button and a TFTP Server) 56
Authorizing Access Points (CLI) 57
Authorizing Access Points (GUI) 58
Disabling the Reset Button on Converted Access Points (CLI) 59
Monitoring the AP Crash Log Information 60
How to Configure a Static IP Address on an Access Point 61
Configuring a Static IP Address on an Access Point (CLI) 61
Configuring a Static IP Address on an Access Point (GUI) 62
Recovering the Access Point Using the TFTP Recovery Procedure 63
Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 63
Displaying the IP Address Configuration for Access Points: Example 63
Displaying Access Point Crash File Information: Example 64
CHAPTER 9 Using Cisco Workgroup Bridges 65
Finding Feature Information 65
Information About Cisco Workgroup Bridges and non-Cisco Workgroup bridges 65
Monitoring the Status of Workgroup Bridges 66
Debugging WGB Issues (CLI) 66
Configuration Examples for Configuring Workgroup Bridges 68
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
vi OL-28697-01
Contents

WGB Configuration: Example 68
CHAPTER 10 Configuring Probe Request Forwarding 69
Finding Feature Information 69
Information About Configuring Probe Request Forwarding 69
How to Configure Probe Request Forwarding (CLI) 69
CHAPTER 11 Optimizing RFID Tracking 71
Finding Feature Information 71
Optimizing RFID Tracking on Access Points 71
How to Optimize RFID Tracking on Access Points 71
Optimizing RFID Tracking on Access Points (CLI) 71
Configuration Examples for Optimizing RFID Tracking 72
Displaying all the Access Points in Monitor Mode: Example 72
CHAPTER 12 Configuring Country Codes 75
Finding Feature Information 75
Prerequisites for Configuring Country Codes 75
Information About Configuring Country Codes 76
How to Configure Country Codes (CLI) 76
Configuration Examples for Configuring Country Codes 79
Displaying Channel List for Country Codes: Example 79
CHAPTER 13 Configuring Link Latency 81
Finding Feature Information 81
Prerequisites for Configuring Link Latency 81
Restrictions for Configuring Link Latency 81
Information About Configuring Link Latency 82
TCP MSS 82
Link Tests 82
How to Configure Link Latency 83
Configuring Link Latency (CLI) 83
Configuring Link Latency (GUI) 85
How to Configure TCP MSS 86
Configuring TCP MSS (CLI) 86
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
OL-28697-01 vii
Contents

Configuring TCP MSS (GUI) 86
Performing a Link Test (CLI) 87
Configuration Examples for Configuring Link Latency 88
Running a Link Test: Example 88
Displaying Link Latency Information: Example 88
Displaying TCP MSS Settings: Example 89
CHAPTER 14 Configuring Power over Ethernet 91
Finding Feature Information 91
Information About Configuring Power over Ethernet 91
How to Configure Power over Ethernet 91
Configuring Power over Ethernet (CLI) 91
Configuring Power over Ethernet (GUI) 92
Configuration Examples for Configuring Power over Ethernet 93
Displaying Power over Ethernet Information: Example 93
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
viii OL-28697-01
Contents

Preface
•Document Conventions, page ix
•Related Documentation, page xi
•Obtaining Documentation and Submitting a Service Request, page xi
Document Conventions
This document uses the following conventions:
DescriptionConvention
Both the ^symbol and Ctrl represent the Control (Ctrl) key on a keyboard. For
example, the key combination ^D or Ctrl-D means that you hold down the Control
key while you press the D key. (Keys are indicated in capital letters but are not
case sensitive.)
^ or Ctrl
Commands and keywords and user-entered text appear in bold font.bold font
Document titles, new or emphasized terms, and arguments for which you supply
values are in italic font.
Italic font
Terminal sessions and information the system displays appear in courier font.Courier font
Bold Courier font indicates text that the user must enter.Bold Courier font
Elements in square brackets are optional.[x]
An ellipsis (three consecutive nonbolded periods without spaces) after a syntax
element indicates that the element can be repeated.
...
A vertical line, called a pipe, indicates a choice within a set of keywords or
arguments.
|
Optional alternative keywords are grouped in brackets and separated by vertical
bars.
[x | y]
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
OL-28697-01 ix

DescriptionConvention
Required alternative keywords are grouped in braces and separated by vertical
bars.
{x | y}
Nested set of square brackets or braces indicate optional or required choices
within optional or required elements. Braces and a vertical bar within square
brackets indicate a required choice within an optional element.
[x {y | z}]
A nonquoted set of characters. Do not use quotation marks around the string or
the string will include the quotation marks.
string
Nonprinting characters such as passwords are in angle brackets.< >
Default responses to system prompts are in square brackets.[ ]
An exclamation point (!) or a pound sign (#) at the beginning of a line of code
indicates a comment line.
!, #
Reader Alert Conventions
This document may use the following conventions for reader alerts:
Means reader take note. Notes contain helpful suggestions or references to material not covered in the
manual.
Note
Means the following information will help you solve a problem.
Tip
Means reader be careful. In this situation, you might do something that could result in equipment damage
or loss of data.
Caution
Means the described action saves time. You can save time by performing the action described in the
paragraph.
Timesaver
Means reader be warned. In this situation, you might perform an action that could result in bodily
injury.
Warning
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
xOL-28697-01
Preface
Document Conventions