Cisco ISR User manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Cisco Wireless ISR and HWIC Access Point
Configuration Guide
December 2006
Text Part Number: 0L-6415-04

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCVP, the Cisco Logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of
Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo,
Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick
Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet,
StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and
certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0612R)
Cisco Wireless ISR and HWIC Access Point Configuration Guide
Copyright © 2006 Cisco Systems, Inc.
All rights reserved.

3
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
CONTENTS
Preface 9
Audience 9
Purpose 9
Organization 10
Conventions 10
Related Publications 12
Obtaining Documentation 13
Cisco.com 13
Product Documentation DVD 14
Ordering Documentation 14
Documentation Feedback 14
Cisco Product Security Overview 15
Reporting Security Problems in Cisco Products 15
Obtaining Technical Assistance 16
Cisco Technical Support & Documentation Website 16
Submitting a Service Request 16
Definitions of Service Request Severity 17
Obtaining Additional Publications and Information 17
CHAPTER 1Overview 1
Wireless Device Management 1
Network Configuration Example 2
Root Unit on a Wired LAN 2
Features 3
5
CHAPTER 2Configuring Radio Settings 1
Enabling the Radio Interface 2
Roles in Radio Network 2
Configuring Network or Fallback Role 3
Bridge Features Not Supported 4
Sample Bridging Configuration 4
Universal Client Mode 7

Contents
4
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
Configuring Universal Client Mode 7
Configuring Radio Data Rates 10
Configuring Radio Transmit Power 12
Limiting the Power Level for Associated Client Devices 13
Configuring Radio Channel Settings 14
DFS Automatically Enabled on Some 5-GHz Radio Channels 19
Enabling and Disabling World Mode 20
Enabling and Disabling Short Radio Preambles 21
Configuring Transmit and Receive Antennas 22
Disabling and Enabling Access Point Extensions 23
Configuring the Ethernet Encapsulation Transformation Method 23
Enabling and Disabling Reliable Multicast to Workgroup Bridges 24
Enabling and Disabling Public Secure Packet Forwarding 25
Configuring Protected Ports 26
Configuring Beacon Period and DTIM 26
Configuring RTS Threshold and Retries 27
Configuring Maximum Data Retries 27
Configuring Fragmentation Threshold 28
Enabling Short Slot Time for 802.11g Radios 28
Performing a Carrier Busy Test 29
CHAPTER 3Configuring Multiple SSIDs 1
Understanding Multiple SSIDs 2
SSID Configuration Methods Supported by Cisco IOS Releases 2
Configuring Multiple SSIDs 3
Creating an SSID Globally 3
Using a RADIUS Server to Restrict SSIDs 5
Configuring Multiple Basic SSIDs 6
Requirements for Configuring Multiple BSSIDs 6
Guidelines for Using Multiple BSSIDs 6
Enabling MBSSID and SSIDL at the same time 7
Sample Configuration for Enabling MBSSID and SSIDL 8
CHAPTER 4Configuring an Access Point as a Local Authenticator 1
Understand Local Authentication 2
Configure a Local Authenticator 2
Guidelines for Local Authenticators 3

Contents
5
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
Configuration Overview 3
Configuring the Local Authenticator Access Point 3
Configuring Other Access Points to Use the Local Authenticator 8
Configuring EAP-FAST Settings 9
Limiting the Local Authenticator to One Authentication Type 11
Unblocking Locked Usernames 11
Viewing Local Authenticator Statistics 11
Using Debug Messages 12
12
CHAPTER 5Configuring Encryption Types 1
Understand Encryption Types 2
Configure Encryption Types 3
Creating WEP Keys 3
Creating Cipher Suites 5
Enabling and Disabling Broadcast Key Rotation 7
Security Type in Universal Client Mode 8
CHAPTER 6Configuring Authentication Types 1
Understand Authentication Types 2
Open Authentication to Access Point 2
Shared Key Authentication to Access Point 3
EAP Authentication to Network 4
MAC Address Authentication to the Network 5
Combining MAC-Based, EAP, and Open Authentication 6
Using WPA Key Management 6
Software and Firmware Requirements for WPA and WPA-TKIP 8
Configure Authentication Types 9
Assigning Authentication Types to an SSID 9
Configuring Authentication Holdoffs, Timeouts, and Intervals 15
Matching Access Point and Client Device Authentication Types 16
CHAPTER 7Configuring RADIUS Servers 1
Configuring and Enabling RADIUS 2
Understanding RADIUS 2
RADIUS Operation 3
Configuring RADIUS 4
Displaying the RADIUS Configuration 17

Contents
6
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
RADIUS Attributes Sent by the Access Point 18
CHAPTER 8Configuring VLANs 1
Understanding VLANs 2
Related Documents 3
Incorporating Wireless Devices into VLANs 4
Configuring VLANs 4
Configuring a VLAN 5
Assigning Names to VLANs 7
Using a RADIUS Server to Assign Users to VLANs 7
Viewing VLANs Configured on the Access Point 8
VLAN Configuration Example 9
CHAPTER 9Configuring QoS 1
Understanding QoS for Wireless LANs 2
QoS for Wireless LANs Versus QoS on Wired LANs 2
Impact of QoS on a Wireless LAN 2
Precedence of QoS Settings 3
Using Wi-Fi Multimedia Mode 4
Configuring QoS 4
Configuration Guidelines 5
Adjusting Radio Access Categories 5
Disabling IGMP Snooping Helper 6
Sample Configuration Using the CLI 6
APPENDIX AChannel Settings 1
IEEE 802.11b (2.4-GHz Band) 1
IEEE 802.11g (2.4-GHz Band) 2
IEEE 802.11a (5-GHz Band) 2
APPENDIX BProtocol Filters 1
APPENDIX CSupported MIBs 1
MIB List 1
Using FTP to Access the MIB Files 2
APPENDIX DError and Event Messages 1
How to Read System Messages 1

Contents
7
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
Message Traceback Reports 2
Association Management Messages 2
802.11 Subsystem Messages 3
Local Authenticator Messages 12
G LOSSARY
I NDEX

Contents
8
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04

9
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
The Preface provides information on the following topics:
• Audience
• Purpose
• Organization
• Related Publications
• Obtaining Documentation
Audience
This guide is for the networking professional who installs and manages Cisco stationary routers with
wireless capabilities. You should have experience working with the Cisco IOS software and be familiar
with the concepts and terminology of wireless LANs.
This document provides information for the following interfaces:
• Access Point High-speed WAN Interface Card (AP HWIC)
• Cisco 800 series routers with wireless capabilities
• Cisco 1800 series routers with wireless capabilities.
Purpose
This guide provides the information you need to install and configure your Cisco wireless device, for
example, AP HWIC, Cisco 800 series and Cisco 1800 series routers. This guide provides procedures for
using the Cisco IOS software commands that have been created or changed for use with the wireless
device. It does not provide detailed information about these commands. For information about the
standard Cisco IOS software commands, see the Cisco IOS software documentation set available from
the Cisco.com home page at Service and Support > Technical Documents. On the Cisco Product
Documentation home page, select Release 12.4 from the Cisco IOS Software drop-down list.

10
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Organization
Organization
This guide consists of the following chapters:
Chapter 1, “Overview,” lists the software and hardware features of the wireless device and describes the
role of the wireless device in your network.
Chapter 2, “Configuring Radio Settings,” describes how to configure settings for the wireless device
radio such as the role in the radio network, data rates, transmit power, channel settings, and others.
Chapter 3, “Configuring Multiple SSIDs,” describes how to configure and manage multiple service set
identifiers (SSIDs) and multiple basic SSIDs (BSSIDs) on your wireless device. You can configure up
to 16 SSIDs and 16 BSSIDs on your wireless device and assign different configuration settings to each.
Chapter 4, “Configuring an Access Point as a Local Authenticator,” describes how to configure the
wireless device to act as a local RADIUS server for your wireless LAN. If the WAN connection to your
main RADIUS server fails, the wireless device acts as a backup server to authenticate wireless devices.
Chapter 5, “Configuring Encryption Types,” describes how to configure the cipher suites required to use
authenticated key management, Wired Equivalent Privacy (WEP), and WEP features.
Chapter 6, “Configuring Authentication Types,” describes how to configure authentication types on the
wireless device. Client devices use these authentication methods to join your network.
Chapter 7, “Configuring RADIUS Servers,” describes how to enable and configure the RADIUS, which
provides detailed accounting information and flexible administrative control over authentication and
authorization processes.
Chapter 8, “Configuring VLANs,” describes how to configure your wireless device to interoperate with
the VLANs set up on your wired LAN.
Chapter 9, “Configuring QoS,” describes how to configure quality of service (QoS) on your wireless
device. With this feature, you can provide preferential treatment to certain traffic at the expense of
others.
Appendix A, “Channel Settings,” lists the wireless device radio channels and the maximum power levels
supported by the world’s regulatory domains.
Appendix B, “Protocol Filters,” lists some of the protocols that you can filter on the wireless device.
Appendix C, “Supported MIBs,” lists the Simple Network Management Protocol (SNMP) Management
Information Bases (MIBs) that the wireless device supports for this software release.
Appendix D, “Error and Event Messages,” lists the CLI error and event messages and provides an
explanation and recommended action for each message.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
• Commands and keywords are in boldface text.
• Arguments for which you supply values are in italic.
• Square brackets ([ ]) mean optional elements.
• Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
• Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.

11
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Conventions
Interactive examples use these conventions:
• Terminal sessions and system displays are in screen font.
• Information you enter is in boldface screen font.
• Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and timesavers use these conventions and symbols:
Tip Means the following will help you solve a problem. The tips information might not be troubleshooting
or even an action, but could be useful information.
Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in
this manual.
Caution Means reader be careful. In this situation, you might do something that could result equipment damage
or loss of data.
Warning This warning symbol means danger. You are in a situation that could cause bodily injury. Before you
work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar
with standard practices for preventing accidents. (To see translations of the warnings that appear
in this publication, refer to the appendix “Translated Safety Warnings.”)
Waarschuwing
Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan
veroorzaken. Voordat u aan enige apparatuur gaat werken, dient u zich bewust te zijn van de bij
elektrische schakelingen betrokken risico’s en dient u op de hoogte te zijn van standaard
maatregelen om ongelukken te voorkomen. (Voor vertalingen van de waarschuwingen die in deze
publicatie verschijnen, kunt u het aanhangsel “Translated Safety Warnings” (Vertalingen van
veiligheidsvoorschriften) raadplegen.)
Varoitus
Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen
kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja
tavanomaisista onnettomuuksien ehkäisykeinoista. (Tässä julkaisussa esiintyvien varoitusten
käännökset löydät liitteestä "Translated Safety Warnings" (käännetyt turvallisuutta koskevat
varoitukset).)
Attention
Ce symbole d’avertissement indique un danger. Vous vous trouvez dans une situation pouvant
entraîner des blessures. Avant d’accéder à cet équipement, soyez conscient des dangers posés par
les circuits électriques et familiarisez-vous avec les procédures courantes de prévention des
accidents. Pour obtenir les traductions des mises en garde figurant dans cette publication, veuillez
consulter l’annexe intitulée « Translated Safety Warnings » (Traduction des avis de sécurité).

12
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Related Publications
Related Publications
Related Cisco technical documentation include the following:
Warnung
Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu einer
Körperverletzung führen könnte. Bevor Sie mit der Arbeit an irgendeinem Gerät beginnen, seien Sie
sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur
Vermeidung von Unfällen bewußt. (Übersetzungen der in dieser Veröffentlichung enthaltenen
Warnhinweise finden Sie im Anhang mit dem Titel “Translated Safety Warnings” (Übersetzung der
Warnhinweise).)
Avvertenza
Questo simbolo di avvertenza indica un pericolo. Si è in una situazione che può causare infortuni.
Prima di lavorare su qualsiasi apparecchiatura, occorre conoscere i pericoli relativi ai circuiti
elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti. La traduzione
delle avvertenze riportate in questa pubblicazione si trova nell’appendice, “Translated Safety
Warnings” (Traduzione delle avvertenze di sicurezza).
Advarsel
Dette varselsymbolet betyr fare. Du befinner deg i en situasjon som kan føre til personskade. Før du
utfører arbeid på utstyr, må du være oppmerksom på de faremomentene som elektriske kretser
innebærer, samt gjøre deg kjent med vanlig praksis når det gjelder å unngå ulykker. (Hvis du vil se
oversettelser av de advarslene som finnes i denne publikasjonen, kan du se i vedlegget "Translated
Safety Warnings" [Oversatte sikkerhetsadvarsler].)
Aviso
Este símbolo de aviso indica perigo. Encontra-se numa situação que lhe poderá causar danos
fisicos. Antes de começar a trabalhar com qualquer equipamento, familiarize-se com os perigos
relacionados com circuitos eléctricos, e com quaisquer práticas comuns que possam prevenir
possíveis acidentes. (Para ver as traduções dos avisos que constam desta publicação, consulte o
apêndice “Translated Safety Warnings” - “Traduções dos Avisos de Segurança”).
¡Advertencia!
Este símbolo de aviso significa peligro. Existe riesgo para su integridad física. Antes de manipular
cualquier equipo, considerar los riesgos que entraña la corriente eléctrica y familiarizarse con los
procedimientos estándar de prevención de accidentes. (Para ver traducciones de las advertencias
que aparecen en esta publicación, consultar el apéndice titulado “Translated Safety Warnings.”)
Varning!
Denna varningssymbol signalerar fara. Du befinner dig i en situation som kan leda till personskada.
Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och
känna till vanligt förfarande för att förebygga skador. (Se förklaringar av de varningar som
förekommer i denna publikation i appendix "Translated Safety Warnings" [Översatta
säkerhetsvarningar].)
Ta b l e 1 Related and Referenced Documents
Cisco Product Document Title
Cisco Access Point
High-Speed WAN Interface
Card
Cisco Interface Cards Installation Guide
Quick Start Guide: Interface Cards for Cisco Access Routers
Installing, Replacing, and Upgrading Components in Cisco Modular
Access Routers and Integrated Services Routers

13
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Obtaining Documentation
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
Cisco 800 series routers Cisco 850 Series and Cisco 870 Series Routers Hardware Installation
Guide
Cisco 850 Series and Cisco 870 Series Access Routers Cabling and Setup
Quick Start Guide
Cisco 850 Series and Cisco 870 Series Access Routers Software
Configuration Guide
Regulatory Compliance and Safety Information for Cisco 800 Series and
SOHO Series Routers
Upgrading Memory in Cisco 800 Routers
Cisco 1800 series routers Cisco 1800 Series Integrated Services Routers (Modular) Quick Start
Guide
Cisco 1800 Series Routers Hardware Installation Documents
Cisco 1800 Series Software Configuration Guide
Cisco 1800 Series Cards and Modules
Regulatory Compliance and Safety Information for Cisco 1840 Routers
Cisco Modular Access Router Cable Specifications
Cisco IOS software Cisco IOS software documentation, all releases.
Refer to the documentation for the Cisco IOS software release installed
on your router.
Additional Documentation Cisco AP HWIC and Access Router Wireless Configuration Guide
Cisco Aironet 2.4-GHz Articulated Dipole Antenna (AIR-ANT4941
Cisco Aironet High Gain Omnidirectional Ceiling Mount Antenna
(AIR-ANT1728)
Cisco Aironet 2 dBi Diversity Omnidirectional Ceiling Mount Antenna
(AIR-ANT5959)
Antenna Cabling
Declarations of Conformity and Regulatory Information for Cisco Access
Products with 802.11a/b/g and 802.11b/g Radios
Table 1 Related and Referenced Documents (continued)
Cisco Product Document Title

14
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Documentation Feedback
You can access the Cisco website at this URL:
http://www.cisco.com
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
Cisco documentation and additional literature are available in the Product Documentation DVD package,
which may have shipped with your product. The Product Documentation DVD is updated regularly and
may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on
portable media. The DVD enables you to access multiple versions of hardware and software installation,
configuration, and command guides for Cisco products and to view technical documentation in HTML.
With the DVD, you have access to the same documentation that is found on the Cisco website without
being connected to the Internet. Certain products also have .pdf versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com
users (Cisco direct customers) can order a Product Documentation DVD (product number
DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.
Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
Cisco Marketplace:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product
Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Cisco will continue to support documentation orders using the Ordering tool:
• Registered Cisco.com users (Cisco direct customers) can order documentation from the
Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
• Instructions for ordering documentation using the Ordering tool are at this URL:
http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm
• Nonregistered Cisco.com users can order documentation through a local account representative by
calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in
North America, by calling 1 800 553-NETS (6387).
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback
form that appears with the technical documents on Cisco.com.

15
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Cisco Product Security Overview
You can send comments about Cisco documentation to b[email protected].
You can submit comments by using the response card (if present) behind the front cover of your
document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you can perform these tasks:
• Report security vulnerabilities in Cisco products.
• Obtain assistance with security incidents that involve Cisco products.
• Register to receive security information from Cisco.
A current list of security advisories and notices for Cisco products is available at this URL:
http://www.cisco.com/go/psirt
If you prefer to see advisories and notices as they are updated in real time, you can access a Product
Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them,
and we strive to correct all vulnerabilities quickly. If you think that you might have identified a
vulnerability in a Cisco product, contact PSIRT:
• Emergencies— [email protected]m
An emergency is either a condition in which a system is under active attack or a condition for which
a severe and urgent security vulnerability should be reported. All other conditions are considered
non emergencies.
• Non emergencies— [email protected]
In an emergency, you can also reach PSIRT by telephone:
• 1 877 228-7302
• 1 408 525-6532
Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive
information that you send to Cisco. PSIRT can work from encrypted information that is compatible with
PGP versions 2.xthrough 8.x.

16
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Obtaining Technical Assistance
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence
with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page
at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.htm
The link on this page has the current PGP key ID in use.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco
Technical Support & Documentation website on Cisco.com features extensive online support resources.
In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC)
engineers provide telephone support. If you do not have a valid Cisco service contract, contact your
reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for
troubleshooting and resolving technical issues with Cisco products and technologies. The website is
available 24 hours a day, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user
ID and password. If you have a valid service contract but do not have a user ID or password, you can
register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting
a web or phone request for service. You can access the CPI tool from the Cisco Technical Support &
Documentation website by clicking the Tools & Resources link under Documentation & Tools. Choose
Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco
Product Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by
product ID or model name; by tree view; or for certain products, by copying and pasting show command
output. Search results show an illustration of your product with the serial number label location
highlighted. Locate the serial number label on your product and record the information before placing a
service call.
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3
and S4 service requests are those in which your network is minimally impaired or for which you require
product information.) After you describe your situation, the TAC Service Request Tool provides
recommended solutions. If your issue is not resolved using the recommended resources, your service
request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest

17
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Obtaining Additional Publications and Information
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone.
(S1 or S2 service requests are those in which your production network is down or severely degraded.)
Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business
operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: [phone] (Australia: 1 800 805 227)
EMEA: [phone]
USA: 1 800 553-2447
For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity
definitions.
Severity 1 (S1)—Your network is “down,” or there is a critical impact to your business operations. You
and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your
business operation are negatively affected by inadequate performance of Cisco products. You and Cisco
will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of your network is impaired, but most business operations
remain functional. You and Cisco will commit resources during normal business hours to restore service
to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or
configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online
and printed sources.
• Cisco Marketplace provides a variety of Cisco books, reference guides, documentation, and logo
merchandise. Visit Cisco Marketplace, the company store, at this URL:
http://www.cisco.com/go/marketplace/
• Cisco Press publishes a wide range of general networking, training and certification titles. Both new
and experienced users will benefit from these publications. For current Cisco Press titles and other
information, go to Cisco Press at this URL:
http://www.ciscopress.com
• Packet magazine is the Cisco Systems technical user magazine for maximizing Internet and
networking investments. Each quarter, Packet delivers coverage of the latest industry trends,
technology breakthroughs, and Cisco products and solutions, as well as network deployment and
troubleshooting tips, configuration examples, customer case studies, certification and training
information, and links to scores of in-depth online resources. You can access Packet magazine at
this URL:
http://www.cisco.com/packet

18
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Preface
Obtaining Additional Publications and Information
• iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies
learn how they can use technology to increase revenue, streamline their business, and expand
services. The publication identifies the challenges facing these companies and the technologies to
help solve them, using real-world case studies and business strategies to help readers make sound
technology investment decisions. You can access iQ Magazine at this URL:
http://www.cisco.com/go/iqmagazine
or view the digital edition at this URL:
http://ciscoiq.texterity.com/ciscoiq/sample/
• Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering
professionals involved in designing, developing, and operating public and private internets and
intranets. You can access the Internet Protocol Journal at this URL:
http://www.cisco.com/ipj
• Networking products offered by Cisco Systems, as well as customer support services, can be
obtained at this URL:
http://www.cisco.com/en/US/products/index.html
• Networking Professionals Connection is an interactive website for networking professionals to share
questions, suggestions, and information about networking products and technologies with Cisco
experts and other networking professionals. Join a discussion at this URL:
http://www.cisco.com/discuss/networking
• World-class networking training is available from Cisco. You can view current offerings at
this URL:
http://www.cisco.com/en/US/learning/index.html

CHAPTER
1-1
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
1
Overview
Cisco wireless devices provide a secure, affordable, and easy-to-use wireless LAN solution that
combines mobility and flexibility with the enterprise-class features required by networking
professionals. With a management system based on Cisco IOS software, Cisco wireless devices are
Wi-Fi certified, 802.11b-compliant, 802.11g-compliant, or 802.11a-compliant wireless LAN
transceivers.
This document provides information for the following devices:
• Access Point High-speed WAN Interface Card (AP HWIC)
• Cisco 800 Series routers with wireless capabilities
• Cisco 1800 Series routers with wireless capabilities
This chapter provides information on the following topics:
• Wireless Device Management
• Network Configuration Example
• Features
Wireless Device Management
You can use the wireless device management system through the following interfaces:
• The Cisco IOS command-line interface (CLI), that can be used through a console port or a Telnet
session. Use the interface dot11radio configuration command in global mode to place the wireless
device into radio configuration mode.
• Simple Network Management Protocol (SNMP).

1-2
Cisco Wireless Router and HWIC Configuration Guide
OL-6415-04
Chapter 1 Overview
Network Configuration Example
Network Configuration Example
This section describes the wireless device role in common wireless network configurations. The access
point default configuration is as a root unit connected to a wired LAN or as the central unit in an
all-wireless network.
Root Unit on a Wired LAN
An access point connected directly to a wired LAN provides a connection point for wireless users.
Figure 1-1 shows access points acting as root units on a wired LAN.
Figure 1-1 Access Points as Root Units on a Wired LAN
Access Point
(Root Unit)
Access Point
(Root Unit)
153370
Wired LAN