Cisco AP541N-A-K9 Instruction Manual

Cisco Small Business Pro
AP 541N Dual-band Single-radio Access Point
OL-20285-01
ADMINISTRATION
GUIDE

Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide i
Contents
Preface 3
Audience 3
Document Conventions 3
Online Help, Supported Browsers, and Limitations 5
Chapter 1: Getting Started 6
Administrator Computer Requirements 7
Administration PC IP Address 8
Connecting the Access Point to a PC 8
Connect the Access Point to an Administration PC 9
Connecting the Access Point to the PC by using a Direct Cable Connection9
Connecting the Access Point to the PC through a Network Connection 10
Launching the Access Point Configuration Utility 11
Display the Configuration Utility By Using the Default IP Address 11
Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or
higher 14
Display the Configuration Utility by Using Another IP Address 16
Troubleshooting Your Connection 18
Using the Ping Command to Test the Connection 18
Possible Cause of Failure 18
Resetting the Device by using the Reset Button 19
Configuring the Access Point by using the Getting Started Page 20
Access Point Configuration 20
Access Point Management Page 21
Wireless Configuration Page 21
Wireless Client Requirements 21
Verifying the Installation 23
Configuring Security on the Wireless Access Point 24
Chapter 2: Status 26
Device Information 27

Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide ii
Contents
Network Interfaces 28
Wired Settings 29
Wireless Settings 29
Traffic Statistics 29
Associated Clients 32
Link Integrity Monitoring 34
Rogue AP Detection 34
Save or Import a List of Known Access Points 39
Chapter 3: Setup 40
LAN Settings 40
Configuring 802.1X Authentication 43
Enabling the Network Time Protocol 46
Chapter 4: Wireless 52
Modifying Wireless Radio Settings 52
Modifying Virtual Access Point Settings 55
Security (Mode) 63
Client Connection Control 76
Configuring a MAC Filter and Station List on the Access Point 76
Configuring MAC Authentication on the RADIUS Server 79
Modifying Advanced Settings 79
Configuring the Wireless Distribution System 91
WEP on WDS Links 94
WPA/PSK on WDS Links 95
Bandwidth Utilization 96
Configuring Quality of Service (QoS) 97
Chapter 5: SNMP 104
Configuring SNMP on the Access Point 104
Configuring SNMP Views 108

Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide iii
Contents
Configuring SNMP Groups 110
Configuring SNMP Users 113
SNMP Targets 115
Chapter 6: Administration 118
Administrator 118
Access Point Configuration 120
Resetting the Access Point to the Factory Default Configuration 121
Saving the Current Configuration to a Backup File 121
Saving the Current Configuration by using TFTP 121
Saving the Current Configuration by using HTTP 122
Restoring the Configuration from a Previously Saved File 122
Restoring the Current Configuration by using TFTP 122
Restoring the Current Configuration by Using HTTP 123
Rebooting the Access Point 124
Software Upgrade 124
Upgrading the Software by using TFTP 124
Upgrading the Software by Using HTTP 126
Event Logs 127
Configuring Persistent Logging Options 128
Configuring the Log Relay Host for Kernel Messages 130
Enabling or Disabling the Log Relay Host on the Events Page 131
Configuring the Web Server Settings 132
Creating an Administration Access Control List 134
Chapter 7: Clustering Multiple Access Points 136
Managing Access Points in the Cluster 136
Clustering Single and Dual Radio Access Points 137
Viewing and Configuring Cluster Members 137
Removing an Access Point from the Cluster 140
Adding an Access Point to a Cluster 140
Navigating to Configuration Information for a Specific Access Point 141

Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide iv
Contents
Navigating to an Access Point by Using its IP Address in a URL 141
Managing Cluster Sessions 142
Sorting Session Information 144
Configuring and Viewing Channel Management Settings 145
Stopping/Starting Automatic Channel Assignment 146
Viewing Current Channel Assignments and Setting Locks 147
Viewing the Last Proposed Set of Changes 148
Configuring Advanced Settings 149
Viewing Wireless Neighborhood Information 150
Viewing Details for a Cluster Member 154
Chapter 8: Configuration Examples 156
Configuring a VAP 157
VAP Configuration from the Web Interface 158
VAP Configuration Using SNMP 159
Configuring Wireless Radio Settings 160
Wireless Radio Configuration from the Web Interface 160
Wireless Radio Configuration Using SNMP 162
Configuring the Wireless Distribution System 162
WDS Configuration from the Web Interface 163
WDS Configuration Using SNMP 164
Clustering Access Points 165
Clustering APs by Using the Web Interface 165
Clustering Access Points by Using SNMP 167
Appendix A:Default Settings 168
Appendix B:Where to Go From Here 172

Preface
AP541N Dual-band Single-radio Access Point Administration Guide 3
Preface
This guide describes setup, configuration, administration and maintenance for the
Cisco®AP 541N Dual-band Single-radio Access Point on a wireless network.
Audience
This guide is intended for System Administrators that are responsible for
configuring and operating a network by using Cisco software
To obtain the greatest benefit from this guide, you should also have basic
knowledge of Ethernet and wireless networking concepts.
Document Conventions
This section describes the conventions this document uses.
NOTE A note provides more information about a feature or technology and cross-
references to related topics.
!
CAUTION A caution provides information about critical aspects of access point configuration,
combinations of settings, events, or procedures that can adversely affect network
connectivity, security, and so forth.

Preface
AP541N Dual-band Single-radio Access Point Administration Guide 4
Table 1 describes the typographical conventions used in this guide.
Table 1 Typographical Conventions
Symbol Example Description
Bold Click Apply to save
your settings.
Menu titles, page names, and button
names
Blue Text See Document
Conventions, page
3.
Hyperlinked text.
courier font WLAN-AP# show
network
Screen text, file names, commands,
user-typed command-line entries
courier font
italics
value Command parameter, which might be a
variable or fixed value.
<> Angle
brackets
<value> Indicates a parameter is a variable. You
must enter a value in place of the
brackets and text inside them.
[ ] Square
brackets
[value] Indicates an optional fixed parameter.
[< >] Angle
brackets within
square
brackets
[<value>] Indicates an optional variable.
{} curly braces {choice1 |
choice2}
Indicates that you must select a
parameter from the list of choices.
| Vertical bars choice1 |
choice2
Separates the mutually exclusive
choices.
[{}] Braces
within square
brackets
[{choice1 |
choice2}]
Indicate a choice within an optional
element.

Preface
AP541N Dual-band Single-radio Access Point Administration Guide 5
Online Help, Supported Browsers, and Limitations
Online help for the Access Point Configuration Utility pages provides information
about all fields and features available from the Access Point Configuration Utility.
The information in the online help is a subset of the information available in the
AP541N Dual-band Single-radio Access Point Administration Guide.
Online help information corresponds to each page on the Access Point
Configuration Utility.
For information about the settings on the current page, click the Help link on the
right side of a page.

1
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 6
Getting Started
The Cisco Access Point provides continuous, high-speed access between
wireless devices and Ethernet devices. It is an advanced, standards-based
solution for wireless networking in businesses of any size. The access point
enables wireless local area network (WLAN) deployment while providing state-of-
the-art wireless networking features.
The access point operates in Standalone Mode. In Standalone Mode, the access
point acts as an individual access point in the network, and you manage it by using
the Access Point Configuration Utility, or SNMP.
This document describes how to perform the setup, management, and
maintenance of the access point in Standalone Mode. Before you power on a new
access point, review the following sections to check required hardware and
software components, client configurations, and compatibility issues. Make sure
you have everything you need for a successful launch and test of your new or
extended wireless network.
This chapter contains the following topics:
•Administrator Computer Requirements
•Connecting the Access Point to a PC
•Troubleshooting Your Connection
•Configuring the Access Point by using the Getting Started Page
•Verifying the Installation
•Configuring Security on the Wireless Access Point
To manage the access point by using the Web interface, the access point needs
an IP address. If you use VLANs or IEEE 802.1X Authentication (port security) on
your network, you might need to configure additional settings on the access point
before it can connect to the network.

Getting Started
Administrator Computer Requirements
7 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
NOTE The WLAN AP is not designed to function as a gateway to the Internet. To connect
your WLAN to other LANs or the Internet, you need a gateway device.
Administrator Computer Requirements
Table 1 describes the minimum requirements for the personal computer for the
initial configuration and administration of the access point through a Access Point
Configuration Utility.
Table 1 Requirements for Configuration
Required Software
or Component
Description
Ethernet Connection
to the Access Point
The computer used to configure the access point must
be connected to the access point by an Ethernet cable.
The IP address must be on the same subnet as the
access point. The subnet mask must match the subnet
mask of the access point. The Administration PC IP
Address section describes the procedure for changing
these parameters on a PC running Windows.
Web Browser and
Operating System
The following Web browsers can be used to display
the access point Configuration Utility Web pages:
•Microsoft®Internet Explorer®version 6.x or 7.x
(with up-to-date patch level for either major
version) and Mozilla Firefox 3.x on Microsoft
Windows®XP or Microsoft Windows 2000
•Mozilla Firefox 3.x on Redhat®Linux®version 2.4
or later
The Web browser must have JavaScript™ enabled to
support the interactive features of the Configuration
Utility interface.
Security Settings Ensure that security is disabled on the wireless client
used initially to configure the access point. Once the
device has been configured, security can be enabled.

Getting Started
Connecting the Access Point to a PC
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 8
1
Administration PC IP Address
We recommend that if you are starting from the default configuration or this is the
first time the device will be configured that you configure the device before you
deploy it in the network by using the access point default static IP address
(192.168.10.10). To do so, the PC IP address must be on the same subnet as the
access point.
Verify that your PC IP address is set to an address on the same subnet as the
access point:
STEP 1 From the Windows Start menu, choose Settings > Control Panel.
STEP 2 On the Control Panel dialog box, click Network.
STEP 3 In the Network dialog box select TCP/IP for your PC Ethernet card, then click
Properties.
STEP 4 In the IP Address window, click Specify an IP address.
STEP 5 In the IP Address field, enter an IP address that is in the same subnet as the access
point IP address. (The default access point IP address is 192.168.10.10. The
default subnet mask is 255.255.255.0.) For example, you can set the:
PC IP address to 192.168.10.250
PC IP subnet mask to 255.255.255.0
STEP 6 In the Subnet Mask field, type 255.255.255.0.
STEP 7 Click OK.
STEP 8 If you are prompted to restart your PC, click Yes.
Connecting the Access Point to a PC
To configure the access point, you can connect the access point directly to an
administration PC or through the network to an administration PC.
If you are not using CCA to configure the access point, we recommend that you configure
the device before deploying it in the network by following the instructions in the “Connect
the Access Point to an Administration PC” section. Otherwise, follow the instructions in
the “Connecting the Access Point to the PC through a Network Connection”

Getting Started
Connecting the Access Point to a PC
9 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
Connect the Access Point to an Administration PC
You can connect the access point to a administration PC directly or through the
network. We recommend that you connect the access point directly to the PC
unless you are using CCA to configure the access point.
Connecting the Access Point to the PC by using a Direct Cable
Connection
To connect the access point to an administration PC, use a direct-cable
connection:
STEP 1 Connect one end of an Ethernet straight-through or crossover cable to the network
port on the access point, as shown in Figure 1.
STEP 2 Connect the other end of the cable to the Ethernet port on the PC.
Figure 1 Connecting the Access Point Using a Direct-Cable Connection
If you use this method, you will need to reconfigure the cabling for subsequent
startup and deployment of the access point so that the access point is no longer
connected directly to the PC but instead is connected to the LAN (either by using a
hub or a switch).
STEP 3 Connect the power adapter to the power port on the back of the access point.
STEP 4 Plug the other end of the power cord into a power outlet.
STEP 5 Configure the access point by following the instructions in the “Display the
Configuration Utility By Using the Default IP Address” section.
195057
192.168.10.10
255.255.255.0
192.168.10.250
255.255.255.0

Getting Started
Connecting the Access Point to a PC
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 10
1
Connecting the Access Point to the PC through a Network Connection
To connect the access point to an administration PC through the network:
STEP 1 Connect one end of an Ethernet straight-through or crossover cable to the network
port on the access point, as shown in Figure 2.
STEP 2 Connect the other end to the same hub or switch where your PC is connected.
Figure 2 Connecting the Access Point Using a LAN Connection
The hub or switch you use must permit broadcast signals from the access point to
reach the other devices on the network.
STEP 3 If you are not using PoE, connect the power adapter to the power port on the back
of the access point, then plug the other end of the power cord into a power outlet.

Getting Started
Connecting the Access Point to a PC
11 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
Launching the Access Point Configuration Utility
This section contains information for the for launching the Access Point
Configuration Utility:
•Using the default static IP address of the switch. Follow the instructions in the
“Display the Configuration Utility By Using the Default IP Address”
section.
•Using Cisco Configuration Assistant (CCA). Follow the instructions in the
“Display the Configuration Utility by Using Cisco Configuration Assistant
2.1 or higher” section.
•Using the an IP address assigned to the switch through DHCP. Follow the
instructions in the “Display the Configuration Utility by Using Another IP
Address” section.
Display the Configuration Utility By Using the Default IP
Address
To a c c e s s t h e Access Point Configuration Utility, enter the default static IP
address of the access point into a Web browser, do the following:
STEP 1 Enter the Cisco AP 541N default static IP address in the address bar and press Enter. For
example, http://192.168.10.10.
The Login window displays, as shown in Figure 3.

Getting Started
Connecting the Access Point to a PC
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 12
1
Figure 3 Login Window
STEP 2 Enter the login information:
Username = cisco
Default password cisco. (Passwords are case sensitive.)
When you log in, the Getting Started page for the access point Configuration
Utility is displayed, as shown in Figure 4.

Getting Started
Connecting the Access Point to a PC
13 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
Figure 4 Getting Started Page
STEP 3 Update the Cisco AP 541N software with the latest version by clicking the Software
Upgrade link, as shown in Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.

Getting Started
Connecting the Access Point to a PC
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 14
1
Display the Configuration Utility by Using
Cisco Configuration Assistant 2.1 or higher
Use Cisco Configuration Assistant 2.1 or higher (CCA) to configure the access
point when it is deployed in a Cisco Smart Business Communications System
(SBCS) network with a UC520 or SR520.
This procedure assumes you are familiar with CCA. You can find additional
information about CCA at http://www.cisco.com/en/US/products/ps7287/
tsd_products_support_series_home.html
To configure the access point by using CCA:
STEP 1 Connect the Ethernet port on the access point to a switch port on a SBCS device.
STEP 2 Power on the Cisco AP541N.
STEP 3 Connect a PC with CCA installed to any access switch port on the UC520 or
SR520.
STEP 4 Create a new CCA site by entering a name and the IP address of the UC520 or
SR520.
STEP 5 Connect to the CCA site by using the appropriate login credentials.
STEP 6 Click Window > Topolo gy View.
195058
Internet
DHCP client

Getting Started
Connecting the Access Point to a PC
15 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
When you have connected to the CCA site and the devices have been discovered,
the Topology Map includes the Cisco AP541N.
NOTE Non-Cisco devices connected to the switch are not shown in the Topology
map.
STEP 7 Right-click the access point to display the options: Configuration Utility,
Properties, and Annotation.
STEP 8 Click Configuration Utility.
The Access Point Configuration Utility
displays in a new window,as shown in
Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.

Getting Started
Connecting the Access Point to a PC
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 16
1
Display the Configuration Utility by Using Another IP Address
You can display the Access Point Configuration Utility by using an IP address
assigned to the access point during a previous configuration or by a DHCP server.
When you power on the access point, the built-in DHCP client searches for a
DHCP server on the network to obtain an IP address and other network
information. If the access point does not find a DHCP server on the network, the
access point uses its default static IP address (192.168.10.10) unless you have
assigned it a static IP address (and specified a static IP addressing policy) or until
the access point successfully receives network information from a DHCP server.
!
CAUTION If the access point IP address is changed, either by a DHCP server or manually, your
link to the access point will be lost and you must enter the new IP address to use
the Access Point Configuration Utility.
To configure the access point by using an IP address other than the default static
IP address:
STEP 1 Power on the Cisco AP541N.
STEP 2 If you used a DHCP server on your network to automatically configure network
information for the access point, enter the IP address assigned to the access point
by the DHCP server into the Web browser.
If you have access to the DHCP server on your network and know the MAC
address of your access point, you can view the new IP address associated with
the MAC address of the access point. Otherwise, we recommend that you
disconnect the access point from the network, reset it to the default configuration
by using the procedure in the “Resetting the Device by using the Reset Button”
section, and configuring the device by using the procedure in the “Display the
Configuration Utility By Using the Default IP Address” section.
If you replaced the default static IP address with a new static IP address, enter the
new IP address of the access point into the Web browser
The Login window displays, as shown in Figure 3.
STEP 3 Enter the login information:
Username is cisco
Default password is cisco (passwords are case sensitive)

Getting Started
Connecting the Access Point to a PC
17 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
1
When you log in, the Getting Started page for the access point Configuration
Utility is displayed, as shown in Figure 4.
STEP 4 Update the Cisco AP 541N software with the latest version by clicking the Software
Upgrade link, as shown in Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.
!
CAUTION If you do not have a DHCP server on your internal network, and do not plan to use
one, we recommend assigning a new static IP address so that if you bring up
another WLAN Cisco AP541N on the same network, the IP address for each access
point is unique. If the IP address is not unique, a conflict results causing
unpredictable results.
To change the connection type and assign a static IP address by using the Access
Point Configuration Utility, see LAN Settings, page 40.