Cisco Small Business WAP551 Instruction Manual

Cisco Small Business
WAP551 Wireless-N Access Point with PoE
and
WAP561 Wireless-N Selectable-Band Access Point with PoE
ADMINISTRATION
GUIDE

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 1
Contents
Chapter 1: Getting Started 5
Starting the Web-Based Configuration Utility 5
Using the Access Point Setup Wizard 6
Getting Started 9
Window Navigation 10
Chapter 2: Status and Statistics 12
System Summary 12
Network Interfaces 14
Traffic Statistics 15
WorkGroup Bridge Transmit/Receive 16
Associated Clients 16
TSPEC Client Associations 18
TSPEC Status and Statistics 20
TSPEC AP Statistics 22
Radio Statistics 22
Email Alert Status 24
Log 24
Chapter 3: Administration 25
System Settings 26
User Accounts 26
Time Settings 28
Log Settings 30
Email Alert 32
HTTP/HTTPS Service 35
Management Access Control 37
Manage Firmware 38
Download/Backup Configuration File 40
Configuration Files Properties 42

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 2
Contents
Copy/Save Configuration 42
Reboot 43
Discovery—Bonjour 44
Packet Capture 44
Support Information 51
Chapter 4: LAN 52
Port Settings 52
VLAN and IPv4 Address Settings 53
IPv6 Addresses 54
IPv6 Tunnel 56
Chapter 5: Wireless 58
Radio 58
Rogue AP Detection 66
Networks 69
Scheduler 81
Scheduler Association 83
Bandwidth Utilization 83
MAC Filtering 84
WDS Bridge 85
WorkGroup Bridge 89
Quality of Service 92
Chapter 6: System Security 105
RADIUS Server 105
802.1X Supplicant 107
Password Complexity 109
WPA-PSK Complexity 110

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 3
Contents
Chapter 7: Client Quality of Service 111
Client QoS Global Settings 111
ACL 111
Class Map 118
Policy Map 123
Client QoS Association 125
Client QoS Status 127
Chapter 8: Simple Network Management Protocol 129
General SNMP Settings 129
Views 132
Groups 133
Users 135
Targets 136
Chapter 9: Captive Portal 138
Captive Portal Global Configuration 139
Instance Configuration 140
Instance Association 143
Web Portal Customization 143
Local Groups 147
Local Users 148
Authenticated Clients 149
Failed Authentication Clients 150
Chapter 10: Single Point Setup 152
Single Point Setup Overview 152
Access Points 157
Sessions 160
Channel Management 161

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 4
Contents
Wireless Neighborhood 165
Chapter A: Deauthentication Message Reason Codes 168
Deauthentication Reason Code Table 168
Appendix B: Where to Go From Here 170

1
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 5
Getting Started
This chapter provides an introduction to the Wireless Access Point (WAP) devices web-based
configuration utility, and includes these topics:
• Starting the Web-Based Configuration Utility
• Using the Access Point Setup Wizard
• Getting Started
• Window Navigation
Starting the Web-Based Configuration Utility
This section describes system requirements and how to navigate the web-based configuration
utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address to access
the WAP device. You can, however, use the Domain Name System (DNS) server to
create a domain name that contains the IPv6 address, and then use that domain name in
the address bar in place of the IPv6 address.
•When using Internet Explorer 8, you can configure security settings from Internet
Explorer. Select Tools > Internet Options and then select the Security tab. Select Local
Intranet and select Sites. Select Advanced and then select Add. Add the intranet
address of the WAP device (http://<ip-address>) to the local intranet zone. The IP

Getting Started
Starting the Web-Based Configuration Utility
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 6
1
address can also be specified as the subnet IP address, so that all addresses in the
subnet are added to the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the IPv6 global
address instead of the IPv6 local address to access the WAP device from your browser.
Launching the Web-Based Configuration Utility
To open the web-based AP configuration utility:
STEP 1 Open a web browser.
Enter the IP address of the WAP device that you are configuring in the address bar on the
browser and then press Enter. The Login page opens.Login
•To find your IP address, you can use the Cisco FindIT Network Discovery Utility. This
tool enables you to automatically discover all supported Cisco Small Business devices
in the same local network segment as your computer. For more information, go to
cisco.com and enter www.cisco.com/go/findit.

Getting Started
Starting the Web-Based Configuration Utility
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 7
1
•For further instructions on how to locate the IP address of your WAP device, see the
WAP device Quick Start Guide.
STEP 2 Enter the user name and password. The factory default user name is cisco and the default
password is cisco.
STEP 3 Click Log In. The Access Point Setup Wizard page opens.
If this is the first time that you logged on with the default user name (cisco) and the default
password (cisco) or your password has expired, the Change Admin Password page opens.
Enter the new password and confirm it, click Apply, and then click Close. The new password
is saved. Then, enter the user name cisco and the new password on the Login page.
Access Point Startup Wizard
See Using the Access Point Setup Wizard for instructions on using the wizard.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 8
1
Logging Out
Logging Out
By default, the web-based AP configuration utility logs out after 10 minutes of inactivity. See
HTTP/HTTPS Service for instructions on changing the default timeout period.
To log out, click Logout in the top right corner of the web-based AP configuration utility.
Using the Access Point Setup Wizard
The first time that you log into the WAP device (or after it has been reset to the factory default
settings), the Access Point Setup Wizard appears to help you perform initial configurations.
Follow these steps to complete the wizard:
NOTE If you click Cancel to bypass the Wizard, the Change Password page appears. You can then
change the default password for logging in. For all other settings, the factory default
configurations apply.
You must log in again after changing your password.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 9
1
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP Address window
appears.
Access Point Setup Wizard—IP Address
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP address from
a DHCP server. Or select Static IP Address to configure IP Address manually. For a
description of these fields, see VLAN and IPv4 Address Settings.
STEP 3 Click Next. The Single Point Setup — Set a Cluster window appears. For a description of
Single Point Setup, see Single Point Setup.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 10
1
Access Point Setup Wizard — Single-Point Setup
STEP 4 To create a new Single Point Setup of WAP devices, select Create a New Cluster and specify a
New Cluster Name. When you configure your devices with the same cluster name and enable
Single Point Setup mode on other WAP devices, they automatically join the group.
If you already have a cluster on your network, you can add this device to it by clicking Join an
Existing Cluster, and then entering the Existing Cluster Name.
If you do not want this device to participate in a Single Point Setup at this time, click Do not
Enable Single Point Setup.
(Optional) You can enter text in the AP Location field to note the physical location of the WAP
device.
(Optional) You can enter the Cluster Management IP Address to control all the devices in
cluster.
STEP 5 Click Next. The Configure Device - Set System Date and Time window appears.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 11
1
Access Point Setup Wizard—Time Settings
STEP 6 Select your time zone, and then set the system time manually or set up the WAP device to get
its time from an NTP server. For a description of these options, see Time Settings.
STEP 7 Click Next. The Enable Security - Set Password window appears.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 12
1
Access Point Setup Wizard—Device Password
STEP 8 Enter a New Password and enter it again in the Confirm Password text box. For more
information about passwords, see User Accounts.
NOTE You can uncheck the Password Complexity box if you wish to disable the
password security rules. However, we strongly recommend keeping the password
security rules enabled.
STEP 9 Click Next. The Enable Security - Name Your Wireless Network window appears for the
Radio 1 interface.
NOTE For this window and the following two windows (Wireless Security and VLAN
ID), you configure these settings for the Radio 1 interface first. Then, for WAP561
devices, the windows repeat to enable you to configure these settings for Radio 2.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 13
1
Access Point Setup Wizard—Network Name
STEP 10 Enter a Network Name. This name serves as the SSID for the default wireless network.
STEP 11 Click Next. The Enable Security - Secure Your Wireless Network window appears.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 14
1
Access Point Setup Wizard—Wireless Security
STEP 12 Choose a security encryption type and enter a security key. For a description of these options,
see System Security.
STEP 13 Click Next. The Wizard displays the Enable Security- Assign the VLAN ID For Your Wireless
Network window.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 15
1
Access Point Setup Wizard—VLAN ID
STEP 14 Enter a VLAN ID for traffic received on the wireless network.
It is suggested that you assign a different VLAN ID from the default (1) to wireless traffic, in
order to segregate it from management traffic on VLAN 1.
STEP 15 Click Next.
STEP 16 For the WAP561 device, the Network Name, Wireless Security, and VLAN ID pages show to
enable configuring Radio 2. When finished with configuring Radio 2, click Next.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 16
1
For the WAP121 device, the Wizard displays the Summary - Confirm Your Settings window.
Skip to STEP 25.
For the WAP321 device, the The Wizard displays the Enable Captive Portal - Create Your
Guest Network window.
Access Point Setup Wizard—Captive Portal Creation
STEP 17 Select whether or not to set up an authentication method for guests on your network (WAP321
only), and click Next.
If you click No, skip to STEP 25.
If you click Yes, the Wizard displays the Enable Captive Portal - Name Your Guest Network
window.
STEP 18 Specify a Guest Network Name for Radio 1. For the WAP561 device, select whether the guest
network uses Radio 1 or Radio 2.
STEP 19 Click Next. The Wizard displays the Enable Captive Portal - Secure Your Guest Network
window.
STEP 20 Choose a security encryption type for the guest network and enter a security key. For a
description of these options, see System Security.
STEP 21 Click Next. The Wizard displays the Enable Captive Portal - Assign the VLAN ID window.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 17
1
STEP 22 Specify a VLAN ID for the guest network. The guest network VLAN ID should be different
from the management VLAN ID.
STEP 23 Click Next. The Wizard displays the Enable Captive Portal - Enable Redirect URL window.
STEP 24 Select Enable Redirect URL and specify a fully qualified domain name or IP address in the
Redirect URL field (including http://). If specified, guest network users are redirected to the
specified URL after authenticating.
STEP 25 Click Next. The Wizard displays the Summary - Confirm Your Settings window.
Access Point Setup Wizard—Summary
STEP 26 Review the settings that you configured. Click Back to reconfigure one or more settings. If
you click Cancel, all settings are returned to the previous or default values.
STEP 27 If they are correct, click Submit. Your WAP setup settings are saved and a confirmation
window appears.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 18
1
Access Point Setup Wizard—Finish
STEP 28 Click Finish. The Getting Started window appears.

Getting Started
Getting Started
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 19
1
Getting Started
To simplify device configuration through quick navigation, the Getting Started page provides
links for performing common tasks. The Getting Started page is the default window every time
you log into the web-based AP configuration utility.
Getting Started
Links on the Getting Started Page
Category Link Name (on the Page) Linked Page
Initial Setup Run Setup Wizard Using the Access Point
Setup Wizard
Configure Radio Settings Radio
Configure Wireless Network Settings Networks
Configure LAN Settings LAN
Configure Single Point Setup Single Point Setup
Device Status System Summary System Summary
Wireless Status Network Interfaces