Cisco M10-RM Quick start guide

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Cisco IOS Software Configuration Guide
for Cisco Aironet Access Points
Cisco IOS Releases 12.4(10b)JA and 12.3(8)JEC
May 2010
Text Part Number: OL-14209-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
Copyright © 2010 Cisco Systems, Inc. All rights reserved.

iii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
CONTENTS
Preface xix
Audience 1-xix
Purpose 1-xix
Organization 1-xx
Conventions 1-xxi
Related Publications 1-xxiii
Obtaining Documentation, Obtaining Support, and Security Guidelines 1-xxiv
Overview 1-1
Features 1-2
Features Introduced in This Release 1-2
Management Options 1-2
Roaming Client Devices 1-3
Network Configuration Examples 1-3
Root Access Point 1-3
Repeater Access Point 1-4
Bridges 1-5
Workgroup Bridge 1-5
Central Unit in an All-Wireless Network 1-6
Using the Web-Browser Interface 2-1
Using the Web-Browser Interface for the First Time 2-3
Using the Management Pages in the Web-Browser Interface 2-3
Using Action Buttons 2-4
Character Restrictions in Entry Fields 2-5
Enabling HTTPS for Secure Browsing 2-5
CLI Configuration Example 2-13
Deleting an HTTPS Certificate 2-13
Using Online Help 2-14
Changing the Location of Help Files 2-14
Disabling the Web-Browser Interface 2-15

Contents
iv
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Using the Command-Line Interface 3-1
Cisco IOS Command Modes 3-2
Getting Help 3-3
Abbreviating Commands 3-3
Using no and default Forms of Commands 3-4
Understanding CLI Messages 3-4
Using Command History 3-4
Changing the Command History Buffer Size 3-5
Recalling Commands 3-5
Disabling the Command History Feature 3-5
Using Editing Features 3-6
Enabling and Disabling Editing Features 3-6
Editing Commands Through Keystrokes 3-6
Editing Command Lines that Wrap 3-7
Searching and Filtering Output of show and more Commands 3-8
Accessing the CLI 3-9
Opening the CLI with Telnet 3-9
Opening the CLI with Secure Shell 3-9
Configuring the Access Point for the First Time 4-1
Before You Start 4-2
Resetting the Device to Default Settings 4-2
Resetting to Default Settings Using the MODE Button 4-2
Resetting to Default Settings Using the GUI 4-2
Resetting to Default Settings Using the CLI 4-3
Obtaining and Assigning an IP Address 4-4
Default IP Address Behavior 4-4
Connecting to the 1100 Series Access Point Locally 4-5
Connecting to the 1130 Series Access Point Locally 4-6
Connecting to the 1200, 1230, 1240, and 1250 Series Access Points Locally 4-6
Connecting to the 1300 Series Access Point/Bridge Locally 4-7
Default Radio Settings 4-7
Assigning Basic Settings 4-8
Default Settings on the Express Setup Page 4-14
Configuring Basic Security Settings 4-16

Contents
v
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Understanding Express Security Settings 4-18
Using VLANs 4-18
Express Security Types 4-19
Express Security Limitations 4-21
Using the Express Security Page 4-21
CLI Configuration Examples 4-22
Configuring System Power Settings for 1130 and 1240 Series Access Points 4-27
Assigning an IP Address Using the CLI 4-28
Using a Telnet Session to Access the CLI 4-28
Configuring the 802.1X Supplicant 4-29
Creating a Credentials Profile 4-29
Applying the Credentials to an Interface or SSID 4-30
Applying the Credentials Profile to the Wired Port 4-30
Applying the Credentials Profile to an SSID Used For the Uplink 4-31
Creating and Applying EAP Method Profiles 4-32
Administering the Access PointWireless Device Access 5-1
Disabling the Mode Button 5-2
Preventing Unauthorized Access to Your Access Point 5-3
Protecting Access to Privileged EXEC Commands 5-3
Default Password and Privilege Level Configuration 5-4
Setting or Changing a Static Enable Password 5-4
Protecting Enable and Enable Secret Passwords with Encryption 5-6
Configuring Username and Password Pairs 5-7
Configuring Multiple Privilege Levels 5-8
Setting the Privilege Level for a Command 5-8
Logging Into and Exiting a Privilege Level 5-9
Controlling Access Point Access with RADIUS 5-9
Default RADIUS Configuration 5-10
Configuring RADIUS Login Authentication 5-10
Defining AAA Server Groups 5-12
Configuring RADIUS Authorization for User Privileged Access and
Network Services 5-14
Displaying the RADIUS Configuration 5-15
Controlling Access Point Access with TACACS+ 5-15
Default TACACS+ Configuration 5-15

Contents
vi
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Configuring TACACS+ Login Authentication 5-15
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 5-17
Displaying the TACACS+ Configuration 5-17
Configuring Ethernet Speed and Duplex Settings 5-18
Configuring the Access Point for Wireless Network Management 5-18
Configuring the Access Point for Local Authentication and Authorization 5-19
Configuring the Authentication Cache and Profile 5-20
Configuring the Access Point to Provide DHCP Service 5-22
Setting up the DHCP Server 5-22
Monitoring and Maintaining the DHCP Server Access Point 5-24
Show Commands 5-24
Clear Commands 5-25
Debug Command 5-25
Configuring the Access Point for Secure Shell 5-25
Understanding SSH 5-25
Configuring SSH 5-26
Configuring Client ARP Caching 5-26
Understanding Client ARP Caching 5-26
Optional ARP Caching 5-26
Configuring ARP Caching 5-27
Managing the System Time and Date 5-27
Understanding Simple Network Time Protocol 5-27
Configuring SNTP 5-28
Configuring Time and Date Manually 5-28
Setting the System Clock 5-28
Displaying the Time and Date Configuration 5-29
Configuring the Time Zone 5-29
Configuring Summer Time (Daylight Saving Time) 5-30
Defining HTTP Access 5-32
Configuring a System Name and Prompt 5-32
Default System Name and Prompt Configuration 5-32
Configuring a System Name 5-32
Understanding DNS 5-33
Default DNS Configuration 5-33
Setting Up DNS 5-34
Displaying the DNS Configuration 5-35
Creating a Banner 5-35

Contents
vii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Default Banner Configuration 5-35
Configuring a Message-of-the-Day Login Banner 5-35
Configuring a Login Banner 5-37
Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode 5-37
Migrating to Japan W52 Domain 5-37
Verifying the Migration 5-39
Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging 5-39
CLI Command 5-40
Configuring Radio Settings 6-1
Enabling the Radio Interface 6-2
Configuring the Role in Radio Network 6-2
Universal Workgroup Bridge Mode 6-5
Configuring Dual-Radio Fallback 6-5
Radio Tracking 6-6
Fast Ethernet Tracking 6-6
MAC-Address Tracking 6-6
Bridge Features Not Supported 6-7
Configuring Radio Data Rates 6-7
Access Points Send Multicast and Management Frames at Highest Basic Rate 6-8
Configuring MCS Rates 6-10
Configuring Radio Transmit Power 6-11
Limiting the Power Level for Associated Client Devices 6-13
Configuring Radio Channel Settings 6-14
802.11n Channel Widths 6-15
Dynamic Frequency Selection 6-16
CLI Commands 6-18
Confirming that DFS is Enabled 6-18
Configuring a Channel 6-19
Blocking Channels from DFS Selection 6-19
Setting the 802.11n Guard Interval 6-20
Configuring Location-Based Services 6-21
Understanding Location-Based Services 6-21
Configuring LBS on Access Points 6-21
Enabling and Disabling World Mode 6-22

Contents
viii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Disabling and Enabling Short Radio Preambles 6-23
Configuring Transmit and Receive Antennas 6-24
Enabling and Disabling Gratuitous Probe Response 6-25
Disabling and Enabling Aironet Extensions 6-26
Configuring the Ethernet Encapsulation Transformation Method 6-27
Enabling and Disabling Reliable Multicast to Workgroup Bridges 6-28
Enabling and Disabling Public Secure Packet Forwarding 6-29
Configuring Protected Ports 6-30
Configuring the Beacon Period and the DTIM 6-30
Configure RTS Threshold and Retries 6-31
Configuring the Maximum Data Retries 6-32
Configuring the Fragmentation Threshold 6-32
Enabling Short Slot Time for 802.11g Radios 6-33
Performing a Carrier Busy Test 6-33
Configuring VoIP Packet Handling 6-33
Viewing VoWLAN Metrics 6-34
Viewing Voice Reports 6-34
Viewing Wireless Client Reports 6-37
Viewing Voice Fault Summary 6-38
Configuring Voice QoS Settings 6-38
Configuring Voice Fault Settings 6-39
Configuring Multiple SSIDs 7-1
Understanding Multiple SSIDs 7-2
Effect of Software Versions on SSIDs 7-2
Configuring Multiple SSIDs 7-4
Default SSID Configuration 7-4
Creating an SSID Globally 7-4
Viewing SSIDs Configured Globally 7-6
Using Spaces in SSIDs 7-6
Using a RADIUS Server to Restrict SSIDs 7-7
Configuring Multiple Basic SSIDs 7-8
Requirements for Configuring Multiple BSSIDs 7-8
Guidelines for Using Multiple BSSIDs 7-8
Configuring Multiple BSSIDs 7-8
CLI Configuration Example 7-10

Contents
ix
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Displaying Configured BSSIDs 7-10
Assigning IP Redirection for an SSID 7-11
Guidelines for Using IP Redirection 7-12
Configuring IP Redirection 7-12
Including an SSID in an SSIDL IE 7-13
NAC Support for MBSSID 7-13
Configuring NAC for MBSSID 7-16
Configuring Spanning Tree Protocol 8-1
Understanding Spanning Tree Protocol 8-2
STP Overview 8-2
1300 and 350 Series Bridge Interoperability 8-3
Access Point/Bridge Protocol Data Units 8-3
Election of the Spanning-Tree Root 8-4
Spanning-Tree Timers 8-5
Creating the Spanning-Tree Topology 8-5
Spanning-Tree Interface States 8-5
Blocking State 8-7
Listening State 8-7
Learning State 8-7
Forwarding State 8-8
Disabled State 8-8
Configuring STP Features 8-8
Default STP Configuration 8-8
Configuring STP Settings 8-9
STP Configuration Examples 8-10
Root Bridge Without VLANs 8-10
Non-Root Bridge Without VLANs 8-11
Root Bridge with VLANs 8-11
Non-Root Bridge with VLANs 8-13
Displaying Spanning-Tree Status 8-14
Configuring an Access Point as a Local Authenticator 9-1
Understanding Local Authentication 9-2
Configuring a Local Authenticator 9-2
Guidelines for Local Authenticators 9-3
Configuration Overview 9-3

Contents
x
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Configuring the Local Authenticator Access Point 9-3
Configuring Other Access Points to Use the Local Authenticator 9-6
Configuring EAP-FAST Settings 9-7
Configuring PAC Settings 9-7
Configuring an Authority ID 9-8
Configuring Server Keys 9-8
Possible PAC Failures Caused by Access Point Clock 9-8
Limiting the Local Authenticator to One Authentication Type 9-9
Unblocking Locked Usernames 9-9
Viewing Local Authenticator Statistics 9-9
Using Debug Messages 9-11
Configuring Cipher Suites and WEP 10-1
Understanding Cipher Suites and WEP 10-2
Configuring Cipher Suites and WEP 10-3
Creating WEP Keys 10-3
WEP Key Restrictions 10-5
Example WEP Key Setup 10-5
Enabling Cipher Suites and WEP 10-6
Matching Cipher Suites with WPA and CCKM 10-7
Enabling and Disabling Broadcast Key Rotation 10-7
Configuring Authentication Types 11-1
Understanding Authentication Types 11-2
Open Authentication to the Access Point 11-2
Shared Key Authentication to the Access Point 11-3
EAP Authentication to the Network 11-4
MAC Address Authentication to the Network 11-5
Combining MAC-Based, EAP, and Open Authentication 11-6
Using CCKM for Authenticated Clients 11-6
Using WPA Key Management 11-7
Software and Firmware Requirements for WPA, CCKM, CKIP, and WPA-TKIP 11-8
Configuring Authentication Types 11-10
Assigning Authentication Types to an SSID 11-10
Configuring WPA Migration Mode 11-13
Configuring Additional WPA Settings 11-14
Configuring MAC Authentication Caching 11-15
Configuring Authentication Holdoffs, Timeouts, and Intervals 11-16
Creating and Applying EAP Method Profiles for the 802.1X Supplicant 11-17

Contents
xi
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Creating an EAP Method Profile 11-18
Applying an EAP Profile to the Fast Ethernet Interface 11-18
Applying an EAP Profile to an Uplink SSID 11-19
Matching Access Point and Client Device Authentication Types 11-19
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection
Services 12-1
Understanding WDS 12-2
Role of the WDS Device 12-2
Role of Access Points Using the WDS Device 12-3
Understanding Fast Secure Roaming 12-3
Understanding Radio Management 12-5
Understanding Layer 3 Mobility 12-5
Understanding Wireless Intrusion Detection Services 12-6
Configuring WDS 12-7
Guidelines for WDS 12-8
Requirements for WDS 12-8
Configuration Overview 12-8
Configuring Access Points as Potential WDS Devices 12-9
CLI Configuration Example 12-13
Configuring Access Points to use the WDS Device 12-14
CLI Configuration Example 12-15
Configuring the Authentication Server to Support WDS 12-15
Configuring WDS Only Mode 12-19
Viewing WDS Information 12-20
Using Debug Messages 12-21
Configuring Fast Secure Roaming 12-21
Requirements for Fast Secure Roaming 12-21
Configuring Access Points to Support Fast Secure Roaming 12-22
CLI Configuration Example 12-24
Configuring Management Frame Protection 12-24
Management Frame Protection 12-24
Overview 12-25
Protection of Unicast Management Frames 12-25
Protection of Broadcast Management Frames 12-25
Client MFP For Access Points in Root mode 12-25
Configuring Client MFP 12-26

Contents
xii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Configuring Radio Management 12-28
CLI Configuration Example 12-29
Configuring Access Points to Participate in WIDS 12-30
Configuring the Access Point for Scanner Mode 12-30
Configuring the Access Point for Monitor Mode 12-30
Displaying Monitor Mode Statistics 12-31
Configuring Monitor Mode Limits 12-32
Configuring an Authentication Failure Limit 12-32
Configuring WLSM Failover 12-32
Resilient Tunnel Recovery 12-32
Active/Standby WLSM Failover 12-33
Configuring RADIUS and TACACS+ Servers 13-1
Configuring and Enabling RADIUS 13-1
Understanding RADIUS 13-2
RADIUS Operation 13-2
Configuring RADIUS 13-3
Default RADIUS Configuration 13-4
Identifying the RADIUS Server Host 13-4
Configuring RADIUS Login Authentication 13-7
Defining AAA Server Groups 13-9
Configuring RADIUS Authorization for User Privileged Access and Network Services 13-11
Configuring Packet of Disconnect 13-12
Starting RADIUS Accounting m 13-13
Selecting the CSID Format 13-14
Configuring Settings for All RADIUS Servers 13-15
Configuring the Access Point to Use Vendor-Specific RADIUS Attributes 13-16
Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication 13-17
Configuring WISPr RADIUS Attributes 13-18
Displaying the RADIUS Configuration 13-19
RADIUS Attributes Sent by the Access Point 13-20
Configuring and Enabling TACACS+ 13-23
Understanding TACACS+ 13-23
TACACS+ Operation 13-24
Configuring TACACS+ 13-24
Default TACACS+ Configuration 13-25
Identifying the TACACS+ Server Host and Setting the Authentication Key 13-25
Configuring TACACS+ Login Authentication 13-26

Contents
xiii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 13-27
Starting TACACS+ Accounting 13-28
Displaying the TACACS+ Configuration 13-29
Configuring VLANs 14-1
Understanding VLANs 14-2
Related Documents 14-3
Incorporating Wireless Devices into VLANs 14-4
Configuring VLANs 14-4
Configuring a VLAN 14-5
Assigning Names to VLANs 14-7
Guidelines for Using VLAN Names 14-7
Creating a VLAN Name 14-8
Using a RADIUS Server to Assign Users to VLANs 14-8
Using a RADIUS Server for Dynamic Mobility Group Assignment 14-9
Viewing VLANs Configured on the Access Point 14-9
VLAN Configuration Example 14-10
Configuring QoS 15-1
Understanding QoS for Wireless LANs 15-2
QoS for Wireless LANs Versus QoS on Wired LANs 15-2
Impact of QoS on a Wireless LAN 15-2
Precedence of QoS Settings 15-3
Using Wi-Fi Multimedia Mode 15-4
Configuring QoS 15-5
Configuration Guidelines 15-5
Configuring QoS Using the Web-Browser Interface 15-5
The QoS Policies Advanced Page 15-9
QoS Element for Wireless Phones 15-9
IGMP Snooping 15-10
AVVID Priority Mapping 15-10
WiFi Multimedia (WMM) 15-10
Adjusting Radio Access Categories 15-10
Configuring Nominal Rates 15-12
Optimized Voice Settings 15-12
Configuring Call Admission Control 15-12
QoS Configuration Examples 15-14

Contents
xiv
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Giving Priority to Voice Traffic 15-14
Giving Priority to Video Traffic 15-15
Configuring Filters 16-1
Understanding Filters 16-2
Configuring Filters Using the CLI 16-2
Configuring Filters Using the Web-Browser Interface 16-3
Configuring and Enabling MAC Address Filters 16-3
Creating a MAC Address Filter 16-4
Using MAC Address ACLs to Block or Allow Client Association to the Access Point 16-6
Creating a Time-Based ACL 16-8
ACL Logging 16-9
CLI Configuration Example 16-9
Configuring and Enabling IP Filters 16-9
Creating an IP Filter 16-11
Configuring and Enabling Ethertype Filters 16-12
Creating an Ethertype Filter 16-13
Configuring CDP 17-1
Understanding CDP 17-2
Configuring CDP 17-2
Default CDP Configuration 17-2
Configuring the CDP Characteristics 17-2
Disabling and Enabling CDP 17-3
Disabling and Enabling CDP on an Interface 17-4
Monitoring and Maintaining CDP 17-4
Configuring SNMP 18-1
Understanding SNMP 18-2
SNMP Versions 18-2
SNMP Manager Functions 18-3
SNMP Agent Functions 18-4
SNMP Community Strings 18-4
Using SNMP to Access MIB Variables 18-4
Configuring SNMP 18-5
Default SNMP Configuration 18-5
Enabling the SNMP Agent 18-5
Configuring Community Strings 18-6

Contents
xv
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Specifying SNMP-Server Group Names 18-7
Configuring SNMP-Server Hosts 18-8
Configuring SNMP-Server Users 18-8
Configuring Trap Managers and Enabling Traps 18-8
Setting the Agent Contact and Location Information 18-10
Using the snmp-server view Command 18-10
SNMP Examples 18-10
Displaying SNMP Status 18-12
Configuring Repeater and Standby Access Points and Workgroup Bridge Mode 19-1
Understanding Repeater Access Points 19-2
Configuring a Repeater Access Point 19-3
Default Configuration 19-4
Guidelines for Repeaters 19-4
Setting Up a Repeater 19-5
Aligning Antennas 19-6
Verifying Repeater Operation 19-6
Setting Up a Repeater As a LEAP Client 19-7
Setting Up a Repeater As a WPA Client 19-8
Understanding Hot Standby 19-9
Configuring a Hot Standby Access Point 19-9
Verifying Standby Operation 19-12
Understanding Workgroup Bridge Mode 19-13
Treating Workgroup Bridges as Infrastructure Devices or as Client Devices 19-14
Configuring a Workgroup Bridge for Roaming 19-15
Configuring a Workgroup Bridge for Limited Channel Scanning 19-15
Configuring the Limited Channel Set 19-15
Ignoring the CCX Neighbor List 19-16
Configuring a Client VLAN 19-16
Configuring Workgroup Bridge Mode 19-16
The Workgroup Bridge in a Lightweight Environment 19-18
Guidelines for Using Workgroup Bridges in a Lightweight Environment 19-18
Sample Workgroup Bridge Configuration 19-20

Contents
xvi
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Managing Firmware and Configurations 20-1
Working with the Flash File System 20-1
Displaying Available File Systems 20-2
Setting the Default File System 20-3
Displaying Information About Files on a File System 20-3
Changing Directories and Displaying the Working Directory 20-3
Creating and Removing Directories 20-4
Copying Files 20-4
Deleting Files 20-5
Creating, Displaying, and Extracting tar Files 20-5
Creating a tar File 20-5
Displaying the Contents of a tar File 20-6
Extracting a tar File 20-7
Displaying the Contents of a File 20-7
Working with Configuration Files 20-7
Guidelines for Creating and Using Configuration Files 20-8
Configuration File Types and Location 20-9
Creating a Configuration File by Using a Text Editor 20-9
Copying Configuration Files by Using TFTP 20-9
Preparing to Download or Upload a Configuration File by Using TFTP 20-10
Downloading the Configuration File by Using TFTP 20-10
Uploading the Configuration File by Using TFTP 20-11
Copying Configuration Files by Using FTP 20-11
Preparing to Download or Upload a Configuration File by Using FTP 20-12
Downloading a Configuration File by Using FTP 20-12
Uploading a Configuration File by Using FTP 20-13
Copying Configuration Files by Using RCP 20-14
Preparing to Download or Upload a Configuration File by Using RCP 20-15
Downloading a Configuration File by Using RCP 20-16
Uploading a Configuration File by Using RCP 20-17
Clearing Configuration Information 20-17
Deleting a Stored Configuration File 20-18
Working with Software Images 20-18
Image Location on the Access Point 20-18
tar File Format of Images on a Server or Cisco.com 20-19
Copying Image Files by Using TFTP 20-19
Preparing to Download or Upload an Image File by Using TFTP 20-19
Downloading an Image File by Using TFTP 20-20

Contents
xvii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Uploading an Image File by Using TFTP 20-22
Copying Image Files by Using FTP 20-22
Preparing to Download or Upload an Image File by Using FTP 20-23
Downloading an Image File by Using FTP 20-24
Uploading an Image File by Using FTP 20-26
Copying Image Files by Using RCP 20-27
Preparing to Download or Upload an Image File by Using RCP 20-27
Downloading an Image File by Using RCP 20-29
Uploading an Image File by Using RCP 20-31
Reloading the Image Using the Web Browser Interface 20-32
Browser HTTP Interface 20-32
Browser TFTP Interface 20-33
Configuring System Message Logging 21-1
Understanding System Message Logging 21-2
Configuring System Message Logging 21-2
System Log Message Format 21-2
Default System Message Logging Configuration 21-3
Disabling and Enabling Message Logging 21-4
Setting the Message Display Destination Device 21-5
Enabling and Disabling Timestamps on Log Messages 21-6
Enabling and Disabling Sequence Numbers in Log Messages 21-6
Defining the Message Severity Level 21-7
Limiting Syslog Messages Sent to the History Table and to SNMP 21-8
Setting a Logging Rate Limit 21-9
Configuring UNIX Syslog Servers 21-10
Logging Messages to a UNIX Syslog Daemon 21-10
Configuring the UNIX System Logging Facility 21-10
Displaying the Logging Configuration 21-12
Wireless Device Troubleshooting 22-1
Checking the Top Panel Indicators 22-2
Indicators on 1130 Series Access Points 22-6
Indicators on 1240 Series Access Points 22-9
Indicators on 1250 Access Points 22-11
Indicators on 1300 Outdoor Access Point/Bridges 22-14
Normal Mode LED Indications 22-14
Power Injector 22-16
Checking Power 22-17

Contents
xviii
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
Low Power Condition 22-17
Checking Basic Settings 22-18
SSID 22-18
WEP Keys 22-18
Security Settings 22-18
Resetting to the Default Configuration 22-19
Using the MODE Button 22-19
Using the Web Browser Interface 22-20
Using the CLI 22-20
Reloading the Access Point Image 22-21
Using the MODE button 22-22
Using the Web Browser Interface 22-22
Browser HTTP Interface 22-23
Browser TFTP Interface 22-23
Using the CLI 22-24
Obtaining the Access Point Image File 22-25
Obtaining TFTP Server Software 22-26
APPENDIX AProtocol Filters A-1
APPENDIX BSupported MIBs B-1
MIB List B-1
Using FTP to Access the MIB Files B-2
APPENDIX CError and Event Messages C-1
Conventions C-2
Software Auto Upgrade Messages C-3
Association Management Messages C-5
Unzip Messages C-6
802.11 Subsystem Messages C-7
Inter-Access Point Protocol Messages C-20
Local Authenticator Messages C-21
WDS Messages C-23
Mini IOS Messages C-24
Access Point/Bridge Messages C-25
Cisco Discovery Protocol Messages C-25
External Radius Server Error Messages C-26

Contents
xix
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01
LWAPP Error Messages C-26
Sensor Messages C-27
SNMP Error Messages C-28
SSH Error Messages C-29
G LOSSARY
I NDEX

Contents
xx
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-14209-01