Cisco AIR-LAP1252AG-A-K9 - Aironet 1252AG - Wireless Access... User manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Cisco Aironet
1200 Series Access Point
Software Configuration Guide
Software Release 11.50T
August, 2002
Text Part Number: OL-2159-03

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT
NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT
ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR
THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION
PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO
LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as
part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
Cisco Aironet 1200 Series Access Point Software Configuration Guide
Copyright © 2002, Cisco Systems, Inc.
All rights reserved.
CCIP, the Cisco Arrow logo, the Cisco Powered Network mark, the Cisco Systems Verified logo, Cisco Unity, Follow Me Browsing, FormShare, Internet
Quotient, iQ Breakthrough, iQ Expertise, iQ FastTrack, the iQ Logo, iQ Net Readiness Scorecard, Networking Academy, ScriptShare, SMARTnet,
TransPath, and Voice LAN are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, Discover All That’s Possible, The
Fastest Way to Increase Your Internet Quotient, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA,
CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco
Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch, Fast Step, GigaStack,
IOS, IP/TV, LightStream, MGX, MICA, the Networkers logo, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar,
SlideCast, StrataView Plus, Stratm, SwitchProbe, TeleRouter, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S.
and certain other countries.
All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0206R)

iii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
CONTENTS
Preface xiii
Audience and Scope xiii
Organization xiii
Conventions xiv
Related Publications xv
Obtaining Documentation xvi
World Wide Web xvi
Documentation CD-ROM xvi
Ordering Documentation xvi
Documentation Feedback xvii
Obtaining Technical Assistance xvii
Cisco.com xvii
Technical Assistance Center xviii
Cisco TAC Web Site xviii
Cisco TAC Escalation Center xix
CHAPTER 1Overview 1-1
Key Features 1-2
Management Options 1-2
Roaming Client Devices 1-3
Network Configuration Examples 1-3
Root Unit on a Wired LAN 1-3
Repeater Unit that Extends Wireless Range 1-4
Central Unit in an All-Wireless Network 1-5

Contents
iv
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
CHAPTER 2Using the Management Interfaces 2-1
Using the Web-Browser Interface 2-2
Using the Web-Browser Interface for the First Time 2-2
Using the Management Pages in the Web-Browser Interface 2-2
Navigating Using the Map Windows 2-4
Using the Command-Line Interface 2-5
Preparing to Use a Terminal Emulator 2-6
Connecting the Serial Cable 2-6
Setting Up the Terminal Emulator 2-7
Changing Settings with the CLI 2-7
Selecting Pages and Settings 2-9
Applying Changes to the Configuration 2-9
Using a Telnet Session 2-9
Using SNMP 2-10
Supported MIBs 2-10
CHAPTER 3Configuration 3-1
Basic Settings 3-2
Entering Basic Settings 3-3
System Name 3-3
MAC Address 3-3
Configuration Server Protocol 3-4
Default IP Address 3-4
Default IP Subnet Mask 3-4
Default Gateway 3-4
Radio Service Set ID (SSID) 3-5
Role in Radio Network 3-5
Radio Network Optimization (Optimize Radio Network For) 3-8
Radio Network Compatibility (Ensure Compatibility With) 3-8

v
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Contents
SNMP Admin. Community 3-8
Filter Setup 3-9
Protocol Filtering 3-9
Creating a Protocol Filter 3-10
Enabling a Protocol Filter 3-14
MAC Address Filtering 3-14
Creating a MAC Address Filter 3-15
Radio Configuration 3-19
Entering Identity Information 3-19
Settings on the AP Radio Identification Page 3-20
Entering Radio Hardware Information 3-22
Settings on the AP Radio Hardware Page 3-23
Entering Advanced Configuration Information 3-31
Settings on the AP Radio Advanced Page 3-32
Ethernet Configuration 3-41
Entering Identity Information 3-41
Settings on the Ethernet Identification Page 3-42
Entering Ethernet Hardware Information 3-43
Settings on the Ethernet Hardware Page 3-44
Entering Advanced Configuration Information 3-46
Settings on the Ethernet Advanced Page 3-46
Server Setup 3-48
Entering Time Server Settings 3-49
Settings on the Time Server Setup Page 3-49
Entering Boot Server Settings 3-51
Settings on the Boot Server Setup Page 3-51
Entering Web Server Settings and Setting Up Access Point Help 3-55
Settings on the Web Server Setup Page 3-56
Entering Name Server Settings 3-58
Settings on the Name Server Setup Page 3-58

Contents
vi
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Entering FTP Settings 3-60
Settings on the FTP Setup Page 3-60
Routing Setup 3-61
Entering Routing Settings 3-62
Default Gateway 3-62
New Network Route Settings 3-63
Installed Network Routes list 3-63
Association Table Display Setup 3-64
Association Table Filters Page 3-64
Settings on the Association Table Filters Page 3-65
Association Table Advanced Page 3-68
Settings on the Association Table Advanced Page 3-69
Event Notification Setup 3-71
Event Display Setup Page 3-71
Settings on the Event Display Setup Page 3-72
Event Handling Setup Page 3-74
Settings on the Event Handling Setup Page 3-76
Event Notifications Setup Page 3-78
Settings on the Event Notifications Setup Page 3-79
CHAPTER 4Security Setup 4-1
Security Overview 4-2
Levels of Security 4-2
Encrypting Radio Signals with WEP 4-3
Additional WEP Security Features 4-3
Network Authentication Types 4-4
Combining MAC-Based, EAP, and Open Authentication 4-8
Protecting the Access Point Configuration with User Manager 4-9
Setting Up WEP 4-9

vii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Contents
Using SNMP to Set Up WEP 4-13
Enabling Additional WEP Security Features 4-14
Enabling Message Integrity Check (MIC) 4-14
Enabling Temporal Key Integrity Protocol (TKIP) 4-16
Enabling Broadcast WEP Key Rotation 4-18
Setting Up Open or Shared Key Authentication 4-19
Setting Up EAP Authentication 4-20
Enabling EAP on the Access Point 4-20
Enabling EAP in Cisco Secure ACS 4-25
Setting a Session-Based WEP Key Timeout 4-26
Setting up a Repeater Access Point as a LEAP Client 4-27
Setting Up MAC-Based Authentication 4-29
Enabling MAC-Based Authentication on the Access Point 4-29
Authenticating Client Devices Using MAC Addresses or EAP 4-34
Enabling MAC-Based Authentication in Cisco Secure ACS 4-35
Summary of Settings for Authentication Types 4-37
Setting Up Backup Authentication Servers 4-40
Setting Up Administrator Authorization 4-41
Creating a List of Authorized Management System Users 4-42
CHAPTER 5Network Management 5-1
Using the Association Table 5-2
Browsing to Network Devices 5-2
Setting the Display Options 5-3
Using Station Pages 5-3
Information on Station Pages 5-5
Performing Pings and Link Tests 5-8
Clearing and Updating Statistics 5-10
Deauthenticating and Disassociating Client Devices 5-11

Contents
viii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Using the Network Map Window 5-11
Using Cisco Discovery Protocol 5-13
Settings on the CDP Setup Page 5-14
MIB for CDP 5-14
Assigning Network Ports 5-15
Settings on the Port Assignments Page 5-16
Enabling Wireless Network Accounting 5-16
Settings on the Accounting Setup Page 5-17
Accounting Attributes 5-19
CHAPTER 6Managing Firmware and Configurations 6-1
Updating Firmware 6-2
Updating with the Browser from a Local Drive 6-2
Full Update of the Firmware Components 6-3
Selective Update of the Firmware Components 6-4
Updating from a File Server 6-5
Full Update of the Firmware Components 6-5
Selective Update of the Firmware Components 6-7
Distributing Firmware 6-8
Distributing a Configuration 6-9
Limiting Distributions 6-11
Downloading, Uploading, and Resetting the Configuration 6-12
Downloading the Current Configuration 6-13
Uploading a Configuration 6-13
Uploading from a Local Drive 6-14
Uploading from a File Server 6-14
Resetting the Configuration 6-16
Restarting the Access Point 6-17

ix
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Contents
CHAPTER 7Management System Setup 7-1
SNMP Setup 7-2
Settings on the SNMP Setup Page 7-2
Using the Database Query Page 7-3
Settings on the Database Query Page 7-4
Changing Settings with the Database Query Page 7-4
Console and Telnet Setup 7-5
Settings on the Console/Telnet Page 7-5
CHAPTER 8Special Configurations 8-1
Setting Up a Repeater Access Point 8-1
Using Hot Standby Mode 8-5
CHAPTER 9Diagnostics and Troubleshooting 9-1
Using Diagnostic Pages 9-2
Radio Diagnostics Page 9-2
Antenna Alignment Test 9-3
Carrier Test 9-5
Network Ports Page 9-7
Identifying Information and Status 9-8
Data Received 9-8
Data Transmitted 9-9
Ethernet Port Page 9-9
AP Radio Page 9-12
Event Log Page 9-17
Display Settings 9-17
Log Headings 9-18
Saving the Log 9-18
Event Log Summary Page 9-19

Contents
x
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Using Command-Line Diagnostics 9-20
Entering Diagnostic Commands 9-21
Diagnostic Command Results 9-21
:eap_diag1_on 9-22
:eap_diag2_on 9-22
:vxdiag_arpshow 9-23
:vxdiag_checkstack 9-25
:vxdiag_hostshow 9-25
:vxdiag_i 9-26
:vxdiag_ipstatshow 9-27
:vxdiag_memshow 9-29
:vxdiag_muxshow 9-29
:vxdiag_routeshow 9-30
:vxdiag_tcpstatshow 9-31
:vxdiag_udpstatshow 9-32
Tracing Packets 9-33
Reserving Access Point Memory for a Packet Trace Log File 9-33
Tracing Packets for Specific Devices 9-34
Tracing Packets for Ethernet and Radio Ports 9-35
Viewing Packet Trace Data 9-36
Packets Stored in a Log File 9-36
Packets Displayed on the CLI 9-37
Checking the Top Panel Indicators 9-37
Finding an Access Point by Blinking the Top Panel Indicators 9-40
Checking Basic Settings 9-40
SSID 9-40
WEP Keys 9-40
EAP Authentication Requires Matching 802.1x Protocol Drafts 9-41
Resetting to the Default Configuration 9-43

xi
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Contents
APPENDIX AChannels, Power Levels, and Antenna Gains A-1
Channels A-2
Channels for IEEE 802.11a A-2
Channels for IEEE 802.11b A-3
Maximum Power Levels and Antenna Gains A-4
For IEEE 802.11a A-4
For IEEE 802.11b A-5
APPENDIX BProtocol Filter Lists B-1
I NDEX

Contents
xii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03

xiii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Preface
The Cisco Aironet 1200 Series Access Point Software Configuration Guide
describes how to configure Cisco Aironet 1200 Series Access Points using the
web-based management system. This manual also briefly describes how to use the
console-based management system.
Audience and Scope
This guide is for the network manager responsible for configuring a wireless
network. Before using the material in this guide, you should be familiar with some
of the concepts and terminology of Ethernet and wireless local area networking.
The scope of this guide is to provide the information you need to configure an
access point, use the access point management system to browse to other devices
on a wireless network, and troubleshoot problems with the access point that might
arise.
Organization
This guide is organized into the following chapters:
Chapter 1, “Overview,”is a functional overview of the access point management
system. It describes the features of the management system and the access point’s
role in a wireless network.
Chapter 2, “Using the Management Interfaces,”describes how to use the
web-based and console-based management interfaces.

Preface
Conventions
xiv
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Chapter 3, “Configuration,”describes the how to use the web-based management
system to configure the access point.
Chapter 4, “Security Setup,”describes how to set up and enable the access point’s
security features.
Chapter 5, “Network Management,”describes how to use the web-based
management system to browse to other devices on a wireless network.
Chapter 6, “Managing Firmware and Configurations,”describes how to update
the access point’s firmware and use the management system to distribute firmware
and configurations to other access points.
Chapter 7, “Management System Setup,”describes methods of managing the
access point other than through the access point management system.
Chapter 8, “Special Configurations,”describes how to set up the access point in
network roles other than as a root unit on a wired LAN, such as in repeater or Hot
Standby mode.
Chapter 9, “Diagnostics and Troubleshooting,”describes how to identify and
resolve some of the problems that might arise when you configure an access point
running this software release.
Appendix A, “Channels, Power Levels, and Antenna Gains,”lists the channels
supported by the world’s regulatory domains.
Appendix B, “Protocol Filter Lists,”lists the protocols you can select for filtering
on the management system’s Protocol Filters pages.
Conventions
This publication uses the following conventions to convey instructions and
information:
Command descriptions use these conventions:
•Commands and keywords are in boldface text.
Notes, tips, and cautions use the following conventions and symbols:
Note Means reader take note. Notes contain helpful suggestions or references to
materials not contained in this manual.

xv
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Preface
Related Publications
Tip Means the following are useful tips.
Caution Means reader be careful. In this situation, you might do something that could
result in equipment damage or loss of data.
Related Publications
The following documents provide more information about access points and
related products:
•Quick Start Guide: Cisco Aironet 1200 Series Access Points describes how to
attach cables, power on, and assign an IP address and default gateway for the
access point.
•Cisco Aironet 1200 Series Access Point Hardware Installation Guide
describes the access point’s hardware features, its physical and performance
characteristics, and how to mount the access point on a wall, ceiling, or
desktop. The Cisco Aironet 1200 Series Access Point Hardware Installation
Guide also contains regulatory information for the device.
•Cisco Secure Access Control Server for Windows 2000/NT Servers Version
2.6 User Guide provides complete instructions for using Cisco Secure ACS,
including steps for configuring Cisco Secure ACS to support access points.
•Quick Start Guide: Cisco Aironet Wireless LAN Adapters describes how to
install and configure PC and PCI client adapter cards for use in a wireless
LAN.
•Cisco Aironet Wireless LAN Adapter Installation and Configuration Guide
provides hardware features, physical and performance characteristics, and
installation instructions for PC and PCI Card client adapters. It also provides
instructions for installing and using the wireless client adapter utilities.

Preface
Obtaining Documentation
xvi
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Obtaining Documentation
These sections explain how to obtain documentation from Cisco Systems.
World Wide Web
You can access the most current Cisco documentation on the World Wide Web at
this URL:
http://www.cisco.com
Translated documentation is available at this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco
Documentation CD-ROM package, which is shipped with your product. The
Documentation CD-ROM is updated monthly and may be more current than
printed documentation. The CD-ROM package is available as a single unit or
through an annual subscription.
Ordering Documentation
You can order Cisco documentation in these ways:
•Registered Cisco.com users (Cisco direct customers) can order Cisco product
documentation from the Networking Products MarketPlace:
http://www.cisco.com/cgi-bin/order/order_root.pl
•Registered Cisco.com users can order the Documentation CD-ROM through
the online Subscription Store:
http://www.cisco.com/go/subscription
•Nonregistered Cisco.com users can order documentation through a local
account representative by calling Cisco Systems Corporate Headquarters
(California, U.S.A.) at 408 526-7208 or, elsewhere in North America, by
calling 800 553-NETS (6387).

xvii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Preface
Obtaining Technical Assistance
Documentation Feedback
You can submit comments electronically on Cisco.com. In the Cisco
Documentation home page, click the Fax or Email option in the “Leave
Feedback”section at the bottom of the page.
You can e-mail your comments to [e-mail].
You can submit your comments by mail by using the response card behind the
front cover of your document or by writing to the following address:
Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com as a starting point for all technical assistance.
Customers and partners can obtain online documentation, troubleshooting tips,
and sample configurations from online tools by using the Cisco Technical
Assistance Center (TAC) Web Site. Cisco.com registered users have complete
access to the technical support resources on the Cisco TAC Web Site.
Cisco.com
Cisco.com is the foundation of a suite of interactive, networked services that
provides immediate, open access to Cisco information, networking solutions,
services, programs, and resources at any time, from anywhere in the world.
Cisco.com is a highly integrated Internet application and a powerful, easy-to-use
tool that provides a broad range of features and services to help you with these
tasks:
•Streamline business processes and improve productivity
•Resolve technical issues with online support
•Download and test software packages

Preface
Obtaining Technical Assistance
xviii
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
•Order Cisco learning materials and merchandise
•Register for online skill assessment, training, and certification programs
If you want to obtain customized information and service, you can self-register on
Cisco.com. To access Cisco.com, go to this URL:
http://www.cisco.com
Technical Assistance Center
The Cisco Technical Assistance Center (TAC) is available to all customers who
need technical assistance with a Cisco product, technology, or solution. Two
levels of support are available: the Cisco TAC Web Site and the Cisco TAC
Escalation Center.
Cisco TAC inquiries are categorized according to the urgency of the issue:
•Priority level 4 (P4)—You need information or assistance concerning Cisco
product capabilities, product installation, or basic product configuration.
•Priority level 3 (P3)—Your network performance is degraded. Network
functionality is noticeably impaired, but most business operations continue.
•Priority level 2 (P2)—Your production network is severely degraded,
affecting significant aspects of business operations. No workaround is
available.
•Priority level 1 (P1)—Your production network is down, and a critical impact
to business operations will occur if service is not restored quickly. No
workaround is available.
The Cisco TAC resource that you choose is based on the priority of the problem
and the conditions of service contracts, when applicable.
Cisco TAC Web Site
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving
both cost and time. The site provides around-the-clock access to online tools,
knowledge bases, and software. To access the Cisco TAC Web Site, go to this
URL:
http://www.cisco.com/tac

xix
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Preface
Obtaining Technical Assistance
All customers, partners, and resellers who have a valid Cisco service contract have
complete access to the technical support resources on the Cisco TAC Web Site.
The Cisco TAC Web Site requires a Cisco.com login ID and password. If you have
a valid service contract but do not have a login ID or password, go to this URL to
register:
http://www.cisco.com/register/
If you are a Cisco.com registered user, and you cannot resolve your technical
issues by using the Cisco TAC Web Site, you can open a case online by using the
TAC Case Open tool at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases through
the Cisco TAC Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2
issues. These classifications are assigned when severe network degradation
significantly impacts business operations. When you contact the TAC Escalation
Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country,
go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the
level of Cisco support services to which your company is entitled: for example,
SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When
you call the center, please have available your service agreement number and your
product serial number.

Preface
Obtaining Technical Assistance
xx
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03