Cisco Small Business AP541N Instruction Manual

Cisco Small Business
AP541N Dual-band Single-radio Access Point
OL-20285-01
ADMINISTRATION
GUIDE

AP541N Dual-band Single-radio Access Point Administration Guide i
Contents
Chapter 1: Getting Started 1
Administrator Computer Requirements 2
Administration PC IP Address 3
Connecting the Access Point to a PC 3
Connect the Access Point to an Administration PC 4
Connecting the Access Point to the PC by using a Direct Cable Connection4
Connecting the Access Point to the PC through a Network Connection 5
Launching the Access Point Configuration Utility 6
Display the Configuration Utility By Using the Default IP Address 6
Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or
higher 9
Display the Configuration Utility by Using Another IP Address 11
Troubleshooting Your Connection 13
Using the Ping Command to Test the Connection 13
Possible Cause of Failure 13
Resetting the Device by using the Reset Button 14
Configuring the Access Point by using the Getting Started Page 15
Access Point Configuration 15
Access Point Management Page 16
Wireless Configuration Page 16
Wireless Client Requirements 16
Verifying the Installation 18
Configuring Security on the Wireless Access Point 19
Chapter 2: Status 21
Device Information 22
Network Interfaces 23
Wired Settings 24
Wireless Settings 24
Traffic Statistics 24
Associated Clients 27
Link Integrity Monitoring 29

AP541N Dual-band Single-radio Access Point Administration Guide ii
Contents
Rogue AP Detection 29
Save or Import a List of Known Access Points 34
Chapter 3: Setup 35
LAN Settings 35
Configuring 802.1X Authentication 38
Enabling the Network Time Protocol 41
Chapter 4: Wireless 47
Modifying Wireless Radio Settings 47
Modifying Virtual Access Point Settings 50
Security (Mode) 58
Client Connection Control 71
Configuring a MAC Filter and Station List on the Access Point 71
Configuring MAC Authentication on the RADIUS Server 74
Modifying Advanced Settings 74
Configuring the Wireless Distribution System 85
WEP on WDS Links 88
WPA/PSK on WDS Links 89
Bandwidth Utilization 90
Configuring Quality of Service (QoS) 91
Chapter 5: SNMP 97
Configuring SNMP on the Access Point 97
Configuring SNMP Views 101
Configuring SNMP Groups 103
Configuring SNMP Users 106
SNMP Targets 108

AP541N Dual-band Single-radio Access Point Administration Guide iii
Contents
Chapter 6: Administration 111
Administrator 111
Access Point Configuration 113
Resetting the Access Point to the Factory Default Configuration 114
Saving the Current Configuration to a Backup File 114
Saving the Current Configuration by using TFTP 114
Saving the Current Configuration by using HTTP 115
Restoring the Configuration from a Previously Saved File 115
Restoring the Current Configuration by using TFTP 115
Restoring the Current Configuration by Using HTTP 116
Rebooting the Access Point 117
Software Upgrade 117
Upgrading the Software by using TFTP 117
Upgrading the Software by Using HTTP 119
Event Logs 120
Configuring Persistent Logging Options 121
Configuring the Log Relay Host for Kernel Messages 123
Enabling or Disabling the Log Relay Host on the Events Page 124
Configuring the Web Server Settings 125
Creating an Administration Access Control List 127
Chapter 7: Clustering Multiple Access Points 129
Managing Access Points in the Cluster 129
Clustering Single and Dual Radio Access Points 130
Viewing and Configuring Cluster Members 130
Removing an Access Point from the Cluster 133
Adding an Access Point to a Cluster 133
Navigating to Configuration Information for a Specific Access Point 134
Navigating to an Access Point by Using its IP Address in a URL 134
Managing Cluster Sessions 134
Sorting Session Information 137
Configuring and Viewing Channel Management Settings 137

AP541N Dual-band Single-radio Access Point Administration Guide iv
Contents
Stopping/Starting Automatic Channel Assignment 139
Viewing Current Channel Assignments and Setting Locks 139
Viewing the Last Proposed Set of Changes 140
Configuring Advanced Settings 141
Viewing Wireless Neighborhood Information 142
Viewing Details for a Cluster Member 146
Chapter 8: Configuration Examples 149
Configuring a VAP 150
VAP Configuration from the Web Interface 151
VAP Configuration Using SNMP 152
Configuring Wireless Radio Settings 153
Wireless Radio Configuration from the Web Interface 153
Wireless Radio Configuration Using SNMP 155
Configuring the Wireless Distribution System 155
WDS Configuration from the Web Interface 156
WDS Configuration Using SNMP 157
Clustering Access Points 158
Clustering APs by Using the Web Interface 158
Clustering Access Points by Using SNMP 160
Appendix 9:Default Settings 161
Appendix 10:Where to Go From Here 165

1
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 1
Getting Started
The Cisco AP541N Dual-band Single-radio Access Point is an advanced,
standards-based solution for wireless networking in businesses of any size. The
access point enables wireless local area network (WLAN) deployment while
providing state-of-the-art wireless networking features.
The access point operates in Standalone Mode. In Standalone Mode, the access
point acts as an individual access point in the network, and you manage it by using
the Access Point Configuration Utility, or SNMP.
This document describes how to perform the setup, management, and
maintenance of the access point in Standalone Mode. Before you power on a new
access point, review the following sections to check required hardware and
software components, client configurations, and compatibility issues. Make sure
you have everything you need for a successful launch and test of your new or
extended wireless network.
This chapter contains the following topics:
•Administrator Computer Requirements
•Connecting the Access Point to a PC
•Troubleshooting Your Connection
•Configuring the Access Point by using the Getting Started Page
•Verifying the Installation
•Configuring Security on the Wireless Access Point
To manage the access point by using the Web interface, the access point needs
an IP address. If you use VLANs or IEEE 802.1X Authentication (port security) on
your network, you might need to configure additional settings on the access point
before it can connect to the network.

Getting Started
Administrator Computer Requirements
2 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
NOTE The WLAN AP is not designed to function as a gateway to the Internet. To connect
your WLAN to other LANs or the Internet, you need a gateway device.
Administrator Computer Requirements
Table 1 describes the minimum requirements for the personal computer for the
initial configuration and administration of the access point through a Access Point
Configuration Utility.
Table 1 Requirements for Configuration
Required Software
or Component
Description
Ethernet Connection
to the Access Point
The computer used to configure the access point must
be connected to the access point by an Ethernet cable.
The IP address must be on the same subnet as the
access point. The subnet mask must match the subnet
mask of the access point. The Administration PC IP
Address section describes the procedure for changing
these parameters on a PC running Windows.
Web Browser and
Operating System
The following Web browsers can be used to display
the access point Configuration Utility Web pages:
•Microsoft®Internet Explorer®version 6.x or 7.x
(with up-to-date patch level for either major
version) and Mozilla Firefox 3.x on Microsoft
Windows®XP or Microsoft Windows 2000
•Mozilla Firefox 3.x on Redhat®Linux®version 2.4
or later
The Web browser must have JavaScript™ enabled to
support the interactive features of the Configuration
Utility interface.
Security Settings Ensure that security is disabled on the wireless client
used initially to configure the access point. Once the
device has been configured, security can be enabled.

Getting Started
Connecting the Access Point to a PC
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 3
1
Administration PC IP Address
We recommend that if you are starting from the default configuration or this is the
first time the device will be configured that you configure the device before you
deploy it in the network by using the access point default static IP address
(192.168.10.10). To do so, the PC IP address must be on the same subnet as the
access point.
Verify that your PC IP address is set to an address on the same subnet as the
access point:
STEP 1 From the Windows Start menu, choose Settings > Control Panel.
STEP 2 On the Control Panel dialog box, click Network.
STEP 3 In the Network dialog box select TCP/IP for your PC Ethernet card, then click
Properties.
STEP 4 In the IP Address window, click Specify an IP address.
STEP 5 In the IP Address field, enter an IP address that is in the same subnet as the access
point IP address. (The default access point IP address is 192.168.10.10. The
default subnet mask is 255.255.255.0.) For example, you can set the:
PC IP address to 192.168.10.250
PC IP subnet mask to 255.255.255.0
STEP 6 In the Subnet Mask field, type 255.255.255.0.
STEP 7 Click OK.
STEP 8 If you are prompted to restart your PC, click Yes .
Connecting the Access Point to a PC
To configure the access point, you can connect the access point directly to an
administration PC or through the network to an administration PC.
If you are not using CCA to configure the access point, we recommend that you configure
the device before deploying it in the network by following the instructions in the “Connect
the Access Point to an Administration PC” section. Otherwise, follow the instructions in
the “Connecting the Access Point to the PC through a Network Connection”

Getting Started
Connecting the Access Point to a PC
4 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
Connect the Access Point to an Administration PC
You can connect the access point to a administration PC directly or through the
network. We recommend that you connect the access point directly to the PC
unless you are using CCA to configure the access point.
Connecting the Access Point to the PC by using a Direct Cable
Connection
To connect the access point to an administration PC, use a direct-cable
connection:
STEP 1 Connect one end of an Ethernet straight-through or crossover cable to the network
port on the access point, as shown in Figure 1.
STEP 2 Connect the other end of the cable to the Ethernet port on the PC.
Figure 1 Connecting the Access Point Using a Direct-Cable Connection
If you use this method, you will need to reconfigure the cabling for subsequent
startup and deployment of the access point so that the access point is no longer
connected directly to the PC but instead is connected to the LAN (either by using a
hub or a switch).
STEP 3 Connect the power adapter to the power port on the back of the access point.
STEP 4 Plug the other end of the power cord into a power outlet.
STEP 5 Configure the access point by following the instructions in the “Display the
Configuration Utility By Using the Default IP Address” section.
195057
192.168.10.10
255.255.255.0
192.168.10.250
255.255.255.0

Getting Started
Connecting the Access Point to a PC
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 5
1
Connecting the Access Point to the PC through a Network Connection
To connect the access point to an administration PC through the network:
STEP 1 Connect one end of an Ethernet straight-through or crossover cable to the network
port on the access point, as shown in Figure 2.
STEP 2 Connect the other end to the same hub or switch where your PC is connected.
Figure 2 Connecting the Access Point Using a LAN Connection
The hub or switch you use must permit broadcast signals from the access point to
reach the other devices on the network.
STEP 3 If you are not using PoE, connect the power adapter to the power port on the back
of the access point, then plug the other end of the power cord into a power outlet.

Getting Started
Connecting the Access Point to a PC
6 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
Launching the Access Point Configuration Utility
This section contains information for the for launching the Access Point
Configuration Utility:
•Using the default static IP address of the switch. Follow the instructions in the
“Display the Configuration Utility By Using the Default IP Address”
section.
•Using Cisco Configuration Assistant (CCA). Follow the instructions in the
“Display the Configuration Utility by Using Cisco Configuration Assistant
2.1 or higher” section.
•Using the an IP address assigned to the switch through DHCP. Follow the
instructions in the “Display the Configuration Utility by Using Another IP
Address” section.
Display the Configuration Utility By Using the Default IP
Address
To a c c e s s t h e Access Point Configuration Utility, enter the default static IP
address of the access point into a Web browser, do the following:
STEP 1 Enter the Cisco AP541N default static IP address in the address bar and press Enter. For
example, http://192.168.10.10.
The Login window displays, as shown in Figure 3.

Getting Started
Connecting the Access Point to a PC
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 7
1
Figure 3 Login Window
STEP 2 Enter the login information:
Username = cisco
Default password cisco. (Passwords are case sensitive.)
When you log in, the Getting Started page for the access point Configuration
Utility is displayed, as shown in Figure 4.

Getting Started
Connecting the Access Point to a PC
8 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
Figure 4 Getting Started Page
STEP 3 Update the Cisco AP541N software with the latest version by clicking the Software
Upgrade link, as shown in Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.

Getting Started
Connecting the Access Point to a PC
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 9
1
Display the Configuration Utility by Using
Cisco Configuration Assistant 2.1 or higher
Use Cisco Configuration Assistant 2.1 or higher (CCA) to configure the access
point when it is deployed in a Cisco Smart Business Communications System
(SBCS) network with a UC520 or SR520.
This procedure assumes you are familiar with CCA. You can find additional
information about CCA at http://www.cisco.com/en/US/products/ps7287/
tsd_products_support_series_home.html
To configure the access point by using CCA:
STEP 1 Connect the Ethernet port on the access point to a switch port on a SBCS device.
STEP 2 Power on the Cisco AP541N.
STEP 3 Connect a PC with CCA installed to any access switch port on the UC520 or
SR520.
STEP 4 Create a new CCA site by entering a name and the IP address of the UC520 or
SR520.
STEP 5 Connect to the CCA site by using the appropriate login credentials.
STEP 6 Click Window > Topology View.
195058
Internet
DHCP client

Getting Started
Connecting the Access Point to a PC
10 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
When you have connected to the CCA site and the devices have been discovered,
the Topology Map includes the Cisco AP541N.
NOTE Non-Cisco devices connected to the switch are not shown in the Topology
map.
STEP 7 Right-click the access point to display the options: Configuration Utility, Properties,
and Annotation.
STEP 8 Click Configuration Utility.
The Access Point Configuration Utility
displays in a new window,as shown in
Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.

Getting Started
Connecting the Access Point to a PC
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 11
1
Display the Configuration Utility by Using Another IP Address
You can display the Access Point Configuration Utility by using an IP address
assigned to the access point during a previous configuration or by a DHCP server.
When you power on the access point, the built-in DHCP client searches for a
DHCP server on the network to obtain an IP address and other network
information. If the access point does not find a DHCP server on the network, the
access point uses its default static IP address (192.168.10.10) unless you have
assigned it a static IP address (and specified a static IP addressing policy) or until
the access point successfully receives network information from a DHCP server.
!
CAUTION If the access point IP address is changed, either by a DHCP server or manually, your
link to the access point will be lost and you must enter the new IP address to use
the Access Point Configuration Utility.
To configure the access point by using an IP address other than the default static
IP address:
STEP 1 Power on the Cisco AP541N.
STEP 2 If you used a DHCP server on your network to automatically configure network
information for the access point, enter the IP address assigned to the access point
by the DHCP server into the Web browser.
If you have access to the DHCP server on your network and know the MAC
address of your access point, you can view the new IP address associated with
the MAC address of the access point. Otherwise, we recommend that you
disconnect the access point from the network, reset it to the default configuration
by using the procedure in the “Resetting the Device by using the Reset Button”
section, and configuring the device by using the procedure in the “Display the
Configuration Utility By Using the Default IP Address” section.
If you replaced the default static IP address with a new static IP address, enter the
new IP address of the access point into the Web browser
The Login window displays, as shown in Figure 3.
STEP 3 Enter the login information:
Username is cisco
Default password is cisco (passwords are case sensitive)

Getting Started
Connecting the Access Point to a PC
12 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
When you log in, the Getting Started page for the access point Configuration
Utility is displayed, as shown in Figure 4.
STEP 4 Update the Cisco AP541N software with the latest version by clicking the Software
Upgrade link, as shown in Figure 4.
Next, we recommend that you:
•Change the password by clicking Change Administrator Password.
•Configure the SSID and enable wireless security, by clicking Configure
Wireless Networks (SSIDs).
•Enable the wireless radio, by clicking Enable Wireless Radio.
•Assign a new static IP address to the access point if your network devices
are configured with static IP addresses, by clicking Set LAN IP Address.
!
CAUTION If you do not have a DHCP server on your internal network, and do not plan to use
one, we recommend assigning a new static IP address so that if you bring up
another WLAN Cisco AP541N on the same network, the IP address for each access
point is unique. If the IP address is not unique, a conflict results causing
unpredictable results.
To change the connection type and assign a static IP address by using the Access
Point Configuration Utility, see LAN Settings, page 35.

Getting Started
Troubleshooting Your Connection
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 13
1
Troubleshooting Your Connection
If you cannot display the login window, you can test the IP address by using the
ping command. If you do not know the IP address, you can configure the device by
resetting the device to the factory defaults and accessing the Access Point
Configuration Utility by using the factory default static IP address.
Using the Ping Command to Test the Connection
If you cannot display the configuration utility, you can test the ability of the PC to
communicate with the access point by using ping. To use ping on a PC running
Windows:
STEP 1 Verify that the Cisco AP541N is powered on and the LEDs indicate the appropriate
links.
STEP 2 Open a command window by using Start > Run and enter cmd.
STEP 3 At the Command window prompt enter ping and the access point IP
address. For example ping 192.168.10.10 (the default static IP address of the
access point).
If successful, you should get a reply similar to the following:
Pinging 192.168.10.10 with 32 bytes of data:
Reply from 192.168.10.10: bytes=32 time<1ms TTL=128
Reply from 192.168.10.10: bytes=32 time<1ms TTL=128
Reply from 192.168.10.10: bytes=32 time<1ms TTL=128
If it fails, likely you are using the wrong access point IP address and you will get a
reply similar to the following:
Pinging 192.168.10.10 with 32 bytes of data:
Request timed out.
Possible Cause of Failure
The most likely cause of connectivity failure is an incorrect IP address.
The Web browser is pointed to the wrong IP address. Or, your PC might be
configured with an IP address that is not in the same subnet as the access point.

Getting Started
Troubleshooting Your Connection
14 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide
1
DHCP is enabled on the Cisco AP541N by default. When a DHCP server is
enabled on your network and the access point is connected to the network, the
DHCP server replaces the default static IP address with a DHCP server–assigned
IP address. If this happens before you display the Access Point Configuration
Utility window, you must use the assigned IP address to display the utility. If this
happens during configuration, the Access Point Configuration Utility will lose
connectivity.
You can query the DHCP server for the new IP address or disconnect the access
point from the network and reset the device to use the static default access point
IP address by using the Resetting the Access Point to the Factory Default
Configuration, page 114 procedure.
Resetting the Device by using the Reset Button
To use the Reset button to reboot or reset the access point, do the following:
•To reboot the access point, press the Reset button. Do not hold it for more
than 10 seconds.
•To restore the access point to the factory default settings:
1. Disconnect the access point from the network or disable all DHCP
servers on your network.
2. With the power on, press-and-hold the Reset button for more than 10
seconds.

Getting Started
Configuring the Access Point by using the Getting Started Page
Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide 15
1
Configuring the Access Point by using the Getting Started
Page
From the Getting Started page, you can use the following links to quickly configure
your access point:
•Access Point Configuration
•Access Point Management Page
•Wireless Configuration Page
Access Point Configuration
To change the access point IP address, password, and VLAN configuration, do the
following:
STEP 1 Click Change Administrator Password to provide a new administration password
for the access point. (The username is cisco and it cannot be changed. The default
password is cisco.)
STEP 2 If you do not have a DHCP server on the network and do not plan to use one, click
Change IP Address to change the connection type from DHCP to static IP and set
a static IP address and subnet mask.
NOTE We recommend that you assign a new static IP address. Otherwise, if you
bring up another Cisco AP541N on the same network, the IP address for
each access point will not be unique; duplicating an IP address on a network
will create a conflict.
Also, if you change the static IP address, you will lose connectivity. To
reestablish connectivity, enter the new IP address into your Web browser
and log into the Configuration Utility.
To change the connection type and assign a static IP address, see LAN
Settings, page 35.